Lucene search
+L

301 matches found

Kitploit
Kitploit
•added 2026/10/04 4:39 a.m.•16 views

CVE-2023-49980

CVE-2023-49980 Best Student Result Management System 1.0 - 目录泄漏 描述 : Best Student Result Management System 1.0 存在访问控制缺陷漏洞。目录泄漏漏洞允许任意远程攻击者无需任何授权即可查看应用程序 includes 和 assets 目录中的敏感文件。 受影响的产品版本 : Best Student Result Management System 1.0 CVE 作者 : Geraldo Alcântara 日期 : 2023/11/28 确认于 : 2023/12/19 CVE ...

7.5CVSS6AI score0.00745EPSS
SaveExploits1
NVD
NVD
•added 2026/10/02 1:17 p.m.•12 views

CVE-2026-104612

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

5.3CVSS0.00273EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/02 12:45 p.m.•39 views

CVE-2026-104612 SourceCodester Student Result Management System Announcement new_announcement.php cross site scripting

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

5.3CVSS0.00273EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/02 12:45 p.m.•10 views

EUVD-2026-91626

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

5.3CVSS4.2AI score0.00273EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/02 12:45 p.m.•11 views

CVE-2026-104612

The SourceCodester Student Result Management System 1.0 contains a Cross-Site Scripting (XSS) vulnerability within the Announcement Module . The flaw is located in the script/academic/core/new_announcement.php file, where the manipulation of the title/announcement argument allows for remote execu...

5.3CVSS4.2AI score0.00273EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•2 views

CVE-2026-104612: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

5.3CVSS0.00273EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/04/06 5:24 a.m.•15 views

CVE-2026-5531

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS5.6AI score0.00321EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/05 3:30 a.m.•31 views

EUVD-2026-19011

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS5.6AI score0.00321EPSS
SaveExploits0References6
NVD
NVD
•added 2026/04/05 2:16 a.m.•26 views

CVE-2026-5531

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS0.00321EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/05 1:00 a.m.•30 views

CVE-2026-5531

CVE-2026-5531 affects SourceCodester Student Result Management System 1.0. The vulnerability is in the HTTP GET Request Handler, impacting the file /login_credentials.txt where login credentials may be stored in cleartext on disk. The issue can be triggered remotely, and public disclosures exist....

6.9CVSS5.4AI score0.00321EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/05 1:00 a.m.•10 views

CVE-2026-5531

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS5.4AI score0.00321EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•5 views

CVE-2026-5531: Cleartext Storage in a File or on Disk

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS5.4AI score0.00321EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/05 12:00 a.m.•22 views

PT-2026-30402

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login credentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated...

6.9CVSS5.4AI score0.00321EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/04/05 12:00 a.m.•21 views

SourceCodester Student Result Management System 安全漏洞

SourceCodester Student Result Management System is an open-source student grade management system developed by SourceCodester. Version 1.0 of the SourceCodester Student Result Management System has a security vulnerability, which stems from data being stored in plaintext in the file...

6.9CVSS6AI score0.00321EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/02/24 1:34 p.m.•18 views

CVE-2026-2984

A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/dropuser.php. Such manipulation of the argument ID leads to denial of service. The attack can be executed remotely. The exploit is publicly available and...

6.9CVSS5.3AI score0.00652EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/24 1:33 p.m.•19 views

CVE-2026-2983

A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/importusers.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of t...

9.8CVSS5.1AI score0.00698EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/23 11:16 a.m.•18 views

CVE-2026-2984

A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/dropuser.php. Such manipulation of the argument ID leads to denial of service. The attack can be executed remotely. The exploit is publicly available and...

6.5CVSS5.6AI score0.00652EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/23 11:16 a.m.•30 views

CVE-2026-2984

A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/dropuser.php. Such manipulation of the argument ID leads to denial of service. The attack can be executed remotely. The exploit is publicly available and...

6.9CVSS0.00652EPSS
SaveExploits1References5
OSV
OSV
•added 2026/02/23 10:16 a.m.•13 views

CVE-2026-2983

A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/importusers.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of t...

9.8CVSS5.5AI score0.00698EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/23 10:16 a.m.•21 views

CVE-2026-2983

A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/importusers.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of t...

9.8CVSS0.00698EPSS
SaveExploits1References5
Rows per page
Query Builder