CVE-2023-36317

CVE-2023-36317 affects sourcecodester Student Study Center Desk Management System 1.0. It is a Cross Site Scripting (XSS) vulnerability exploitable via a crafted GET request to the web application URL that could allow arbitrary code execution in the user’s browser/session. Documents do not provid...

CVE-2023-33580: Improper Neutralization of Input During Web Page Generation

Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting XSS in the "Admin Name" field on Admin Profile page...

CVE-2023-33580

Phpgurukul Student Study Center Management System V1.0 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Admin Name field on the Admin Profile page. The root cause is inadequate input sanitization/validation for the Admin Name, allowing injected JavaScript to be stored and e...

CVE-2023-33580

Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting XSS in the "Admin Name" field on Admin Profile page...

Student Study Center Management System 跨站脚本漏洞

Student Study Center Management System is a student study center management system from the individual developer ANUJ KUMAR. A security vulnerability exists in Student Study Center Management System version 1.0, which stems from a stored cross-site scripting XSS vulnerability...

Student Study Center Management System v1.0 - Stored Cross-Site Scripting Vulnerability

Exploit Title: Student Study Center Management System v1.0 - Stored Cross-Site Scripting XSS Exploit Author: VIVEK CHOUDHARY @sudovivek Version: V1.0 Tested on: Windows 10 Vendor Homepage: https://phpgurukul.com Software Link:...

Student Study Center Desk Management System SQL Injection Vulnerability

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in Student Study Center Desk Management System v1.0, which originates from the lack of validation of externally entered SQL statements in adminreportsindex.phpdatefro...

CVE-2023-29985

Sourcecodester Student Study Center Desk Management System v1.0 admin\reports\index.phpdatefrom has a SQL Injection vulnerability...

CVE-2023-29985

CVE-2023-29985 affects Sourcecodester Student Study Center Desk Management System v1.0. The adminreportsindex.php#date_from endpoint is vulnerable to SQL Injection due to lack of validation of externally supplied SQL statements, enabling potential exposure of sensitive database data. The CVSS v3....

CVE-2023-29985: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Student Study Center Desk Management System v1.0 admin\reports\index.phpdatefrom has a SQL Injection vulnerability...

CVE-2023-2152

A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched...

CVE-2023-2152

A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched...

CVE-2023-2152 SourceCodester Student Study Center Desk Management System index.php file inclusion

A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched...

CVE-2023-2152

CVE-2023-2152 affects SourceCodester Student Study Center Desk Management System 1.0. The vulnerability is an unauthenticated file inclusion in the index.php file caused by manipulation of the page argument, allowing remote exploitation. Multiple sources confirm impact to an unknown functionality...

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file managestudent.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

CVE-2023-2151 SourceCodester Student Study Center Desk Management System manage_student.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file managestudent.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

CVE-2023-2151

SourceCodester Student Study Center Desk Management System 1.0 contains a SQL injection vulnerability in manage_student.php triggered by manipulating the id parameter. The issue allows remote exploitation; multiple sources (NVD, Red Hat, CVE lists, PRION) corroborate the vulnerability and market ...

Student Study Center Desk Management System 安全漏洞

Student Study Center Desk Management System is a student study center desk management system. A security vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which stems from a problem with the file index.php, where manipulation of the parameter page...

Student Study Center Desk Management System SQL注入漏洞

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in Student Study Center Desk Management System version 1.0, which stems from a problem with the file managestudent.php, where manipulation of the parameter id can lea...

CVE-2023-2152: External Control of File Name or Path

A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched...