611 matches found
CVE-2024-6801 SourceCodester Online Student Management System add-students.php unrestricted upload
A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0. This issue affects some unknown processing of the file /add-students.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated...
CVE-2024-6801
CVE-2024-6801 affects SourceCodester Online Student Management System 1.0. The issue is in the handling of the file parameter image on /add-students.php, where manipulation leads to unrestricted file upload. This allows remote attackers to upload arbitrary files, with potential for high-impact co...
CVE-2024-6191
A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-6191
A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-6191
CVE-2024-6191 affects itsourcecode Student Management System 1.0, specifically the Login Page login.php. The vulnerability is a SQL injection caused by unsafely handling the user parameter, exploitable remotely. Public disclosure has occurred. The connected sources discuss remote impact and the n...
CVE-2024-6191 itsourcecode Student Management System Login Page login.php sql injection
A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The...
Student Management System SQL Injection Vulnerability
Student Management System is a simple web-based student management software by Sk. Amir Hamza, an individual developer in Bangladesh. A SQL injection vulnerability exists in itsourcecode Student Management System version 1.0, which originates from the login.php in the component Login that contain...
CVE-2024-5047
A vulnerability classified as critical has been found in SourceCodester Student Management System 1.0. Affected is an unknown function of the file /student/controller.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploi...
CVE-2024-5047 SourceCodester Student Management System controller.php unrestricted upload
A vulnerability classified as critical has been found in SourceCodester Student Management System 1.0. Affected is an unknown function of the file /student/controller.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploi...
CVE-2024-5047 SourceCodester Student Management System controller.php unrestricted upload
A vulnerability classified as critical has been found in SourceCodester Student Management System 1.0. Affected is an unknown function of the file /student/controller.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploi...
CVE-2024-5047
CVE-2024-5047 affects SourceCodester Student Management System 1.0. The vulnerability is in an unknown function of the file /student/controller.php, where manipulating the photo argument leads to unrestricted upload . Impact is described as remote exploitability with potential impact on confident...
SourceCodester Student Management System 代码问题漏洞
SourceCodester Student Management System is an online student management system from SourceCodester, Inc. The system provides student information management, announcement management, course management and other functions. A code issue vulnerability exists in SourceCodester Student Management Syst...
PT-2024-34246 · Unknown · Sourcecodester Student Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /student/controller.php. The manipulation of the photo argument leads to unrestricted...
Student Management System units_view.php File Cross-Site Scripting Vulnerability
Student Management System is a simple web-based student management software. A cross-site scripting vulnerability exists in Student Management System version 1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the FirstRecord parameter of the unitsview.php...
CVE-2024-3533
A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file academicyearview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can b...
CVE-2024-3533
A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file academicyearview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can b...
CVE-2024-3531
A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file coursesview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated...
CVE-2024-3532 Campcodes Complete Online Student Management System attendance_view.php cross site scripting
A vulnerability classified as problematic has been found in Campcodes Complete Online Student Management System 1.0. Affected is an unknown function of the file attendanceview.php. The manipulation of the argument FirstRecord leads to cross site scripting. It is possible to launch the attack...
CVE-2024-3532
The CVE-2024-3532 entry concerns Campcodes Complete Online Student Management System v1.0. Affected is the attendance_view.php file, where manipulation of the FirstRecord argument enables cross-site scripting. Exploitation can be performed remotely, and public disclosures exist. Connected reports...
CVE-2024-3531 Campcodes Complete Online Student Management System courses_view.php cross site scripting
A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file coursesview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated...