CVE-2025-2973: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in code-projects College Management System 1.0. This affects an unknown part of the file /Admin/student.php. The manipulation of the argument profileimage leads to unrestricted upload. It is possible to initiate the attack remotely. The...

PT-2025-13646

Name of the Vulnerable Software and Affected Versions code-projects College Management System version 1.0 Description A critical issue was found in the College Management System, affecting the /Admin/student.php file. The manipulation of the profile image argument leads to unrestricted upload. Th...

CVE-2024-10736

A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2024-10736

CVE-2024-10736 affects Codezips Free Exam Hall Seating Management System 1.0. The vulnerability is in /student.php via the email parameter, enabling SQL injection. Attack can be remote; exploit has been disclosed publicly. Impact is substantial (data exposure/integrity/availability). According to...

CVE-2024-10736 Codezips Free Exam Hall Seating Management System student.php sql injection

A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2024-10736: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2024-8172 SourceCodester QR Code Attendance System delete-student.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. This issue affects some unknown processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads to cross site scripting. The attack...

CVE-2024-8172: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. This issue affects some unknown processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads to cross site scripting. The attack...

CVE-2024-7192: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/student.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

PT-2024-38154

Name of the Vulnerable Software and Affected Versions itsourcecode Society Management System version 1.0 Description A critical issue was found in the itsourcecode Society Management System, affecting an unknown part of the file /admin/student.php. The manipulation of the image argument leads to...

CVE-2024-6277: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in lahirudanushka School Management System 1.0.0/1.0.1. Affected is an unknown function of the file student.php of the component Student Page. The manipulation of the argument update leads to sql injection. It is possible to launch the...

PT-2024-35816

Name of the Vulnerable Software and Affected Versions Kashipara College Management System version 1.0 Description A problematic issue has been found in the file submit enroll student.php, where the manipulation of the class name argument leads to cross-site scripting. This issue can be initiated...

PT-2024-35859

Name of the Vulnerable Software and Affected Versions Kashipara College Management System version 1.0 Description A vulnerability has been found in the file submit student.php, where the manipulation of the address argument leads to cross site scripting. The attack can be launched remotely. The...

Cross site scripting

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /Admin/add-student.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtfullname parameter...

CVE-2022-45223: Improper Neutralization of Input During Web Page Generation

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /Admin/add-student.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtfullname parameter...

CVE-2022-45223

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /Admin/add-student.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtfullname parameter...

CVE-2022-39179: Improper Neutralization of Special Elements used in an SQL Command

College Management System v1.0 - Authenticated remote code execution. An admin user the authentication can be bypassed using SQL Injection that mentioned in my other report can upload .php file that contains malicious code via student.php file...

CVE-2022-3434

CVE-2022-3434 affects the SourceCodester Web-Based Student Clearance System. The vulnerability resides in the prepare function of /Admin/add-student.php, enabling cross-site scripting. The issue can be exploited remotely and the exploit has been disclosed publicly. Multiple sources corroborate th...

PT-2022-18730

Name of the Vulnerable Software and Affected Versions SourceCodester Student Information System affected versions not specified Description A critical issue was found in the SourceCodester Student Information System, affecting an unknown functionality of the file /admin/students/view student.php...

CVE-2022-2774

A vulnerability was found in SourceCodester Library Management System. It has been declared as critical. This vulnerability affects unknown code of the file librarian/student.php. The manipulation of the argument title leads to sql injection. The attack can be initiated remotely. VDB-206170 is th...