Sql injection

A vulnerability was found in SourceCodester Library Management System. It has been declared as critical. This vulnerability affects unknown code of the file librarian/student.php. The manipulation of the argument title leads to sql injection. The attack can be initiated remotely. VDB-206170 is th...

CVE-2022-2774 SourceCodester Library Management System student.php sql injection

A vulnerability was found in SourceCodester Library Management System. It has been declared as critical. This vulnerability affects unknown code of the file librarian/student.php. The manipulation of the argument title leads to sql injection. The attack can be initiated remotely. VDB-206170 is th...

CVE-2022-2774: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Library Management System. It has been declared as critical. This vulnerability affects unknown code of the file librarian/student.php. The manipulation of the argument title leads to sql injection. The attack can be initiated remotely. VDB-206170 is th...

PT-2022-18572

Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System affected versions not specified Description A critical issue has been found in the SourceCodester Library Management System, affecting the file librarian/student.php. The manipulation of the title...

CVE-2022-31908: Improper Neutralization of Special Elements used in an SQL Command

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

PT-2022-20982

Name of the Vulnerable Software and Affected Versions Student Registration and Fee Payment System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /scms/student.php endpoint. This allows for potential exploitation. Recommendations For Student Registration and Fee...

Sql injection

Due to lack of protection, parameter studentid in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to extract information from databases...

CVE-2022-27041

Due to lack of protection, parameter studentid in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to extract information from databases...

PT-2022-18188

Name of the Vulnerable Software and Affected Versions OpenSIS Classic version 8.0 Description The issue is due to a lack of protection, allowing the student id parameter in the "/modules/eligibility/Student.php" endpoint to be used for injecting SQL queries, which can extract information from...

CVE-2022-27041: Improper Neutralization of Special Elements used in an SQL Command

Due to lack of protection, parameter studentid in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to extract information from databases...

PT-2021-22849

Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description Multiple Cross Site Scripting XSS vulnerabilities exist in the system via various parameters in different PHP files, including user username and category in "save...

PT-2021-23651

Name of the Vulnerable Software and Affected Versions Sourcecodester Engineers Online Portal affected versions not specified Description A SQL injection issue exists via the id parameter to the "announcements student.php" web page, allowing a malicious user to extract sensitive data from the web...

College Management System 1.0 Arbitrary File Upload

Exploit Title: college management system - Arbitrary File Upload Unauthenticated Date: 01/10/2021 Exploit Author: Abdulrahman https://twitter.com/infosec90 Vendor Homepage: https://www.eedunext.com/ Software Link: https://code-projects.org/college-management-system-in-php-with-source-code/ Versio...

PT-2018-17829

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Student Profile Management System Script version 2.0.6 Description The issue concerns a problem where an attacker can inject malicious code into the Name field, which is then executed when the list student.php page is accessed...

CVE-2014-4033

Cross-site scripting XSS vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php...

Cross site scripting

Cross-site scripting XSS vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php...

CVE-2014-4033: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php...

PT-2014-5685

Name of the Vulnerable Software and Affected Versions Epignosis eFront version 3.6.14.4 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the surname parameter to the "student.php" endpoint. Recommendations For...

Multiple vulnerabilities in Efront

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Efront, which can be exploited to perform SQL injection and cross-site scripting attacks. 1 Cross-Site scripting XSS vulnerabilities in Efront 1.1 Input passed via the "course" GET parameter to index.php is not...