CVE-2023-28351: Insertion of Sensitive Information into Log File

An issue was discovered in Faronics Insight 10.0.19045 on Windows. Every keystroke made by any user on a computer with the Student application installed is logged to a world-readable directory. A local attacker can trivially extract these cleartext keystrokes, potentially enabling them to obtain...

CVE-2023-2151

A vulnerability, which was classified as critical, was found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file managestudent.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...