CVE-2025-15053: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can lead to sql injection. The attack may be performed from remote. The exploit has been published and...

Code-Projects Student Information System SQL Injection Vulnerability

Code-Projects Student Information System is a Code-Projects open source student information system. A SQL injection vulnerability exists in Code-Projects Student Information System version 1.0, which stems from an incorrect manipulation of the searchbox parameter in the file /searchresults.php,...

CVE-2025-15034

A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

CVE-2025-15034

CVE-2025-15034 affects itsourcecode Student Management System 1.0. The vulnerability exists in /record.php where manipulating the ID parameter triggers a SQL injection. It is exploitable remotely and, per multiple sources, the exploit has been released publicly. No specific remediation is stated ...

CVE-2025-15034 itsourcecode Student Management System record.php sql injection

A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

CVE-2025-15034 itsourcecode Student Management System record.php sql injection

A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

CVE-2025-15034: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

PT-2025-52728

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A security flaw exists in itsourcecode Student Management System 1.0. The issue involves SQL injection within the /record.php file, triggered by manipulating the ID argument. This...

Itsourcecode Student Management System SQL Injection Vulnerability

itsourcecode Student Management System is an open source student management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from incorrect manipulation of the parameter ID in the file /record.php, which could lea...

CVE-2025-14967

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidatesreport.php. The manipulation of the argument schoolyear leads to sql injection. The attack can be initiated remotely. The exploit is...

EUVD-2025-204608

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidatesreport.php. The manipulation of the argument schoolyear leads to sql injection. The attack can be initiated remotely. The exploit is...

CVE-2025-14967

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidatesreport.php. The manipulation of the argument schoolyear leads to sql injection. The attack can be initiated remotely. The exploit is...

CVE-2025-14967

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidatesreport.php. The manipulation of the argument schoolyear leads to sql injection. The attack can be initiated remotely. The exploit is...

CVE-2025-14967

CVE-2025-14967 affects itsourcecode Student Management System 1.0. The vulnerability lies in the file /candidates_report.php where manipulation of the school_year parameter leads to SQL injection. Attacks can be initiated remotely, and an exploit is publicly available. Red Hat and other sources c...

CVE-2025-14967 itsourcecode Student Management System candidates_report.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidatesreport.php. The manipulation of the argument schoolyear leads to sql injection. The attack can be initiated remotely. The exploit is...

CVE-2025-14967 itsourcecode Student Management System candidates_report.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidatesreport.php. The manipulation of the argument schoolyear leads to sql injection. The attack can be initiated remotely. The exploit is...

CVE-2025-14967: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidatesreport.php. The manipulation of the argument schoolyear leads to sql injection. The attack can be initiated remotely. The exploit is...

PT-2025-52510

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A flaw exists in itsourcecode Student Management System 1.0 within an unknown functionality of the file /candidates report.php. Manipulation of the school year argument can lead to...

CVE-2025-14347

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. OBS Student Affairs Information System0 allows Reflected XSS.This issue affects OBS Student Affairs Information System0: before 26.5009...

Student File Management System update_user.php File Cross-Site Scripting Vulnerability

Student File Management System is a student file management system. A cross-site scripting vulnerability exists in Student File Management System, which originates from an incorrect operation of the file /admin/updateuser.php, for which no detailed vulnerability details are currently available...