Lucene search
+L

395 matches found

Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.22 views

PT-2025-52867

Name of the Vulnerable Software and Affected Versions code-projects Student Information System version 1.0 Description A flaw exists in the processing of the /searchresults.php file within the software. Manipulation of the searchbox argument can lead to SQL injection. The attack can be performed...

7.5CVSS6.8AI score0.00372EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.11 views

Open Solutions For Education openSIS 安全漏洞

Open Solutions For Education openSIS is an open source student information management system from Open Solutions For Education, USA. A security vulnerability exists in Open Solutions For Education openSIS version 9.2 and prior versions, which stems from improper access control and could lead to...

8.1CVSS6.3AI score0.00288EPSS
SaveExploits1References2
NVD
NVD
added 2025/12/08 4:15 a.m.12 views

CVE-2025-14214

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

8.8CVSS0.00332EPSS
SaveExploits1References6
OSV
OSV
added 2025/12/08 4:15 a.m.27 views

CVE-2025-14214

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

8.8CVSS5.6AI score0.00332EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/12/08 3:32 a.m.11 views

EUVD-2025-201665

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

6.5CVSS6.4AI score0.00332EPSS
SaveExploits1References7
CVE
CVE
added 2025/12/08 3:32 a.m.27 views

CVE-2025-14214

CVE-2025-14214 affects itsourcecode Student Information System 1.0. The vulnerability is a SQL injection in the file /section_edit1.php caused by manipulation of the ID parameter. Remote exploitation is possible and exploits have been publicly disclosed. Multiple connected sources confirm the iss...

8.8CVSS6.6AI score0.00332EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/08 3:32 a.m.4 views

CVE-2025-14214 itsourcecode Student Information System section_edit1.php sql injection

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

6.5CVSS6.2AI score0.00332EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/12/08 3:32 a.m.52 views

CVE-2025-14214 itsourcecode Student Information System section_edit1.php sql injection

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

6.5CVSS0.00332EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/08 12:00 a.m.15 views

PT-2025-49504

Name of the Vulnerable Software and Affected Versions itsourcecode Student Information System version 1.0 Description A SQL injection issue exists in itsourcecode Student Information System 1.0. The issue is located in an unknown part of the file '/section edit1.php'. Manipulation of the ID...

8.8CVSS6.6AI score0.00332EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/12/08 12:00 a.m.11 views

itsourcecode Student Information System SQL注入漏洞

itsourcecode Student Information System is an open source student information system by itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Information System, which stems from incorrect manipulation of the parameter ID in the file /sectionedit1.php, which...

8.8CVSS6.7AI score0.00332EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/11/25 3:35 a.m.23 views

CVE-2025-13581

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

8.8CVSS7.1AI score0.00308EPSS
SaveExploits1References1
NVD
NVD
added 2025/11/24 4:15 a.m.14 views

CVE-2025-13581

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

8.8CVSS0.00308EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/24 4:15 a.m.12 views

CVE-2025-13581

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

8.8CVSS5.8AI score0.00308EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/24 3:32 a.m.5 views

CVE-2025-13581 itsourcecode Student Information System schedule_edit1.php sql injection

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

6.5CVSS6.8AI score0.00308EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/24 3:32 a.m.39 views

CVE-2025-13581 itsourcecode Student Information System schedule_edit1.php sql injection

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

6.5CVSS0.00308EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/24 3:32 a.m.24 views

CVE-2025-13581

Summary of CVE-2025-13581 (itsourcecode Student Information System 1.0): The vulnerability resides in an unknown functionality of the file /schedule_edit1.php where manipulating the argument schedule_id enables an SQL injection. It can be exploited remotely, and publicly available exploit materia...

8.8CVSS6.8AI score0.00308EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/11/24 12:00 a.m.12 views

itsourcecode Student Information System SQL注入漏洞

itsourcecode Student Information System is an itsourcecode open source student information system. The SQL injection vulnerability exists in itsourcecode Student Information System version 1.0, which stems from an incorrect manipulation of the scheduleid parameter in the file /scheduleedit1.php,...

8.8CVSS6.8AI score0.00308EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/24 12:00 a.m.15 views

PT-2025-47876

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /schedule edit1.php. Such manipulation of the argument schedule id leads to sql injection. The attack may be launched remotely. The exploit is...

6.5CVSS7.3AI score0.00308EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/11/19 12:10 a.m.25 views

CVE-2025-13325

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

8.8CVSS7AI score0.00308EPSS
SaveExploits1References1
NVD
NVD
added 2025/11/18 12:15 a.m.14 views

CVE-2025-13325

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

8.8CVSS0.00308EPSS
SaveExploits1References5
Rows per page
Query Builder