Lucene search
+L

4544 matches found

Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.8 views

PT-2025-47876

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /schedule edit1.php. Such manipulation of the argument schedule id leads to sql injection. The attack may be launched remotely. The exploit is...

6.5CVSS7.3AI score0.00301EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.9 views

PT-2025-47888

A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirm password causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

5.8CVSS5.3AI score0.00313EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/11/23 6:30 p.m.8 views

EUVD-2025-198575

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public and...

7.5CVSS6.6AI score0.00379EPSS
SaveExploits1References6
NVD
NVD
added 2025/11/23 4:15 p.m.5 views

CVE-2025-13555

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public an...

9.8CVSS0.00379EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/23 12:0 a.m.7 views

CampCodes School File Management System SQL注入漏洞

CampCodes School File Management System is a school file management system from CampCodes Philippines. A SQL injection vulnerability exists in Campcodes School File Management System version 1.0, which stems from the incorrect operation of the parameter studentno in the file /index.php, which may...

9.8CVSS7.9AI score0.00379EPSS
SaveExploits1References6
CNVD
CNVD
added 2025/11/20 12:0 a.m.6 views

Student Record System manage-students.php Component Cross-Site Request Forgery Vulnerability

Student Record System is a software application. Student Record System suffers from a cross-site request forgery vulnerability that stems from the manage-students.php component not adequately verifying that a request is from a trusted user, which could be exploited by an attacker to cause...

7.5CVSS6.8AI score0.00223EPSS
SaveExploits2References1
CNVD
CNVD
added 2025/11/20 12:0 a.m.10 views

School Fees Payment Management System /ajax.php?action=save_student file SQL injection vulnerability

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file...

9.8CVSS6AI score0.00316EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/19 12:11 a.m.17 views

CVE-2025-63892

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS6.6AI score0.00349EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/19 12:10 a.m.21 views

CVE-2025-13325

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

8.8CVSS7AI score0.00301EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/18 7:15 p.m.9 views

CVE-2025-63955

A Cross-Site Request Forgery CSRF vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submitting a forged request. This leads to the unauthorized deletion of user accounts, causing a Denial of...

7.5CVSS5.7AI score0.00223EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
added 2025/11/18 4:55 p.m.8 views

CVE-2025-13289

A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /TeacherLogin/Academics/SubjectDetails.php. The manipulation of the argument SubCode results in sql injection. The attack may be performed from...

8.8CVSS6.4AI score0.00299EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/18 3:30 p.m.8 views

EUVD-2025-198003

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS5.5AI score0.00349EPSS
SaveExploits1References4
OSV
OSV
added 2025/11/18 3:16 p.m.9 views

CVE-2025-63892

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS4.4AI score0.00349EPSS
SaveExploits1References3
NVD
NVD
added 2025/11/18 3:16 p.m.9 views

CVE-2025-63892

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS0.00349EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/11/18 2:2 p.m.5 views

CVE-2025-13349 SourceCodester Student Grades Management System Add New Grade grades.php cross site scripting

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack ...

5.1CVSS3.7AI score0.0025EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/18 2:2 p.m.20 views

CVE-2025-13349 SourceCodester Student Grades Management System Add New Grade grades.php cross site scripting

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack ...

5.1CVSS0.0025EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/18 12:15 a.m.10 views

CVE-2025-13325

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

8.8CVSS0.00301EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/18 12:2 a.m.16 views

CVE-2025-13325

The CVE-2025-13325 entry concerns itsourcecode Student Information System 1.0. The vulnerability is in the file /enrollment_edit1.php, where manipulation of the en_id parameter enables SQL injection. The attack can be performed remotely, and public exploit details exist. Remediation or affected v...

8.8CVSS6.6AI score0.00301EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/18 12:2 a.m.5 views

CVE-2025-13325 itsourcecode Student Information System enrollment_edit1.php sql injection

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

6.5CVSS6.6AI score0.00301EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/18 12:2 a.m.6 views

EUVD-2025-197888

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

6.5CVSS6.4AI score0.00301EPSS
SaveExploits1References7
Rows per page
Query Builder