Lucene search
K

611 matches found

Cvelist
Cvelist
added 2024/07/17 1:31 a.m.24 views

CVE-2024-6801 SourceCodester Online Student Management System add-students.php unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0. This issue affects some unknown processing of the file /add-students.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated...

6.5CVSS0.00758EPSS
Exploits1References4
CVE
CVE
added 2024/07/17 1:31 a.m.48 views

CVE-2024-6801

CVE-2024-6801 affects SourceCodester Online Student Management System 1.0. The issue is in the handling of the file parameter image on /add-students.php, where manipulation leads to unrestricted file upload. This allows remote attackers to upload arbitrary files, with potential for high-impact co...

9.8CVSS6.8AI score0.00758EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2024/06/20 3:15 p.m.14 views

CVE-2024-6191

A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS0.00574EPSS
Exploits1References4
OSV
OSV
added 2024/06/20 3:15 p.m.4 views

CVE-2024-6191

A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS6.8AI score0.00574EPSS
Exploits1References4
CVE
CVE
added 2024/06/20 2:31 p.m.50 views

CVE-2024-6191

CVE-2024-6191 affects itsourcecode Student Management System 1.0, specifically the Login Page login.php. The vulnerability is a SQL injection caused by unsafely handling the user parameter, exploitable remotely. Public disclosure has occurred. The connected sources discuss remote impact and the n...

9.8CVSS7.8AI score0.00574EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/06/20 2:31 p.m.28 views

CVE-2024-6191 itsourcecode Student Management System Login Page login.php sql injection

A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS0.00574EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/06/20 12:0 a.m.4 views

Student Management System SQL Injection Vulnerability

Student Management System is a simple web-based student management software by Sk. Amir Hamza, an individual developer in Bangladesh. A SQL injection vulnerability exists in itsourcecode Student Management System version 1.0, which originates from the login.php in the component Login that contain...

9.8CVSS7.9AI score0.00574EPSS
Exploits1References5
NVD
NVD
added 2024/05/17 2:15 p.m.33 views

CVE-2024-5047

A vulnerability classified as critical has been found in SourceCodester Student Management System 1.0. Affected is an unknown function of the file /student/controller.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploi...

9.8CVSS7.3AI score0.00947EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/05/17 1:31 p.m.31 views

CVE-2024-5047 SourceCodester Student Management System controller.php unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Student Management System 1.0. Affected is an unknown function of the file /student/controller.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploi...

7.5CVSS7.3AI score0.00947EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/05/17 1:31 p.m.15 views

CVE-2024-5047 SourceCodester Student Management System controller.php unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Student Management System 1.0. Affected is an unknown function of the file /student/controller.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploi...

7.5CVSS7AI score0.00947EPSS
Exploits1References4
CVE
CVE
added 2024/05/17 1:31 p.m.51 views

CVE-2024-5047

CVE-2024-5047 affects SourceCodester Student Management System 1.0. The vulnerability is in an unknown function of the file /student/controller.php, where manipulating the photo argument leads to unrestricted upload . Impact is described as remote exploitability with potential impact on confident...

9.8CVSS6.9AI score0.00947EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.3 views

SourceCodester Student Management System 代码问题漏洞

SourceCodester Student Management System is an online student management system from SourceCodester, Inc. The system provides student information management, announcement management, course management and other functions. A code issue vulnerability exists in SourceCodester Student Management Syst...

9.8CVSS7.5AI score0.00947EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/05/17 12:0 a.m.4 views

PT-2024-34246 · Unknown · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /student/controller.php. The manipulation of the photo argument leads to unrestricted...

9.8CVSS7.4AI score0.00947EPSS
Exploits1References7
CNVD
CNVD
added 2024/04/12 12:0 a.m.12 views

Student Management System units_view.php File Cross-Site Scripting Vulnerability

Student Management System is a simple web-based student management software. A cross-site scripting vulnerability exists in Student Management System version 1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the FirstRecord parameter of the unitsview.php...

6.1CVSS6.4AI score0.00667EPSS
Exploits1References1
NVD
NVD
added 2024/04/10 2:15 a.m.17 views

CVE-2024-3533

A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file academicyearview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can b...

6.1CVSS3.8AI score0.00641EPSS
Exploits1References4
OSV
OSV
added 2024/04/10 2:15 a.m.2 views

CVE-2024-3533

A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file academicyearview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can b...

6.1CVSS3.8AI score0.00641EPSS
Exploits1References4
NVD
NVD
added 2024/04/10 2:15 a.m.14 views

CVE-2024-3531

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file coursesview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated...

6.1CVSS3.7AI score0.00644EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/04/10 1:31 a.m.16 views

CVE-2024-3532 Campcodes Complete Online Student Management System attendance_view.php cross site scripting

A vulnerability classified as problematic has been found in Campcodes Complete Online Student Management System 1.0. Affected is an unknown function of the file attendanceview.php. The manipulation of the argument FirstRecord leads to cross site scripting. It is possible to launch the attack...

4CVSS6.2AI score0.00641EPSS
Exploits1References4
CVE
CVE
added 2024/04/10 1:31 a.m.51 views

CVE-2024-3532

The CVE-2024-3532 entry concerns Campcodes Complete Online Student Management System v1.0. Affected is the attendance_view.php file, where manipulation of the FirstRecord argument enables cross-site scripting. Exploitation can be performed remotely, and public disclosures exist. Connected reports...

6.1CVSS6.2AI score0.00641EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/04/10 1:31 a.m.20 views

CVE-2024-3531 Campcodes Complete Online Student Management System courses_view.php cross site scripting

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file coursesview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated...

4CVSS4.1AI score0.00644EPSS
Exploits1References4
Rows per page
Query Builder