830 matches found
CVE-2026-2939 itsourcecode Student Management System Add Student add_student cross site scripting
A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /addstudent/ of the component Add Student Module. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-2939
The CVE-2026-2939 affects itsourcecode Student Management System 1.0. The vulnerable element is an unknown function in the Add Student Module’s /add_student/ path, enabling cross-site scripting. The vulnerability can be exploited remotely and the exploit is public. Documents do not specify a vend...
Itsourcecode Student Management System Code Injection Vulnerability
itsourcecode Student Management System is an open-source student management system developed by itsourcecode. Version 1.0 of itsourcecode Student Management System has a code injection vulnerability, which may lead to cross-site scripting attacks...
PT-2026-21426
A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /add student/ of the component Add Student Module. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been...
Student Management System Code Injection Vulnerability
Student Management System is a simple web-based student management software developed by Sk.Amir Hamza in Bangladesh. The Student Management System has a code injection vulnerability, which stems from incorrect handling of the parameter “Error” in the file index.php, potentially leading to...
PT-2026-21428
Name of the Vulnerable Software and Affected Versions SapneshNaik Student Management System affected versions not specified Description A flaw exists in SapneshNaik Student Management System that allows for cross site scripting. The issue is related to the manipulation of the Error argument withi...
CVE-2026-2943: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in SapneshNaik Student Management System up to f4b4f0928f0b5551a28ee81ae7e7fe47d9345318. This impacts an unknown function of the file index.php. Such manipulation of the argument Error leads to cross site scripting. The attack can be launched remotely. The exploit i...
CVE-2026-2939: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /addstudent/ of the component Add Student Module. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been...
CVE-2024-55270
phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata parameter...
SMS-SSM Authorization Issue Vulnerability
SMS-SSM is a student management system personally developed by HackHuang. There are authorization-related vulnerabilities in SMS-SSM; these vulnerabilities stem from improper authorization in the preHandle function within the LoginInterceptor.java file...
CVE-2024-55270
phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata parameter...
CVE-2024-55270
phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata parameter...
PHPGurukul Student Management System security vulnerabilities
PHPGurukul Student Management System is a student management system developed by PHPGurukul Corporation. Version 1.0 of the phpgurukul Student Management System has a security vulnerability; this vulnerability stems from the searchdata parameter in the studentms/admin/search.php file, which is...
PT-2026-20214
Name of the Vulnerable Software and Affected Versions phpgurukul Student Management System version 1.0 Description The software is susceptible to SQL injection in the 'studentms/admin/search.php' file through the searchdata parameter. This allows for potential unauthorized access to or modificati...
CVE-2024-55270
phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata parameter...
CVE-2024-55270: Improper Neutralization of Special Elements used in an SQL Command
phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata parameter...
CVE-2024-55270
The phpgurukul Student Management System 1.0 is vulnerable to a Blind SQL Injection due to inadequate input sanitization of the searchdata parameter. This flaw exists in the studentms/admin/search.php endpoint. An attacker could exploit this vulnerability by injecting malicious SQL queries to gai...
CVE-2024-55270
phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata parameter...
CVE-2026-2156
A weakness has been identified in code-projects Online Student Management System 1.0. The impacted element is an unknown function of the file /admin/announcement/index.php?view=add of the component Announcement Management Module. This manipulation causes cross site scripting. The attack is possib...
CVE-2026-2156
A weakness has been identified in code-projects Online Student Management System 1.0. The impacted element is an unknown function of the file /admin/announcement/index.php?view=add of the component Announcement Management Module. This manipulation causes cross site scripting. The attack is possib...