CVE-2025-10914 Reflected XSS in Proliz's OBS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Reflected XSS. This issue affects OBS Student Affairs Information System: before V26.0401...

CVE-2025-10914 Reflected XSS in Proliz's OBS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Reflected XSS. This issue affects OBS Student Affairs Information System: before V26.0401...

EUVD-2025-35659

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Reflected XSS.This issue affects OBS Student Affairs Information System: before V26.0401...

17gz International Student service system 安全漏洞

17gz International Student service system is an online system for the enrollment service process from 17gz Inc. A security vulnerability exists in 17gz International Student service system version 1.0, which originates from a cross-site scripting vulnerability in the enrollment step that could le...

CVE-2025-57240

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-57240

CVE-2025-57240: XSS in 17gz International Student service system 1.0, via the registration step. Connected documents corroborate the description but do not provide concrete technical details (e.g., vulnerable component, versions, root cause, exploit vector) or remediation. No exploitation status ...

PT-2025-43434

Name of the Vulnerable Software and Affected Versions Proliz Software Ltd. Co. OBS Student Affairs Information System versions prior to V26.0401 Description A flaw exists in Proliz Software Ltd. Co. OBS Student Affairs Information System that allows for Reflected Cross-site Scripting XSS. This...

CVE-2025-57240

Cross site scripting XSS vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the registration step...

CVE-2025-60511

Moodle OpenAI Chat Block plugin 3.0.1 2025021700 suffers from an Insecure Direct Object Reference IDOR vulnerability due to insufficient validation of the blockId parameter in /blocks/openaichat/api/completion.php. An authenticated student can impersonate another user's block e.g., administrator...

Student Crud Operation delete.ph File SQL Injection Vulnerability

Student Crud Operation is a student information system. Student Crud Operation suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file delete.php. An attacker can exploit this vulnerability to execute...

EUVD-2025-33864

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

CVE-2025-11601

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

CVE-2025-11601

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

CVE-2025-11601

The CVE-2025-11601 in SourceCodester Online Student Result System 1.0 is triggered via SQL injection in /login.php by manipulating the Username parameter. The vulnerability is exploitable remotely, with multiple sources indicating a publicly available exploit. Affected component is the login auth...

CVE-2025-11601 SourceCodester Online Student Result System login.php sql injection

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

CVE-2025-11601 SourceCodester Online Student Result System login.php sql injection

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

SourceCodester Online Student Result System SQL注入漏洞

SourceCodester Online Student Result System is a SourceCodester open source online student result system. A SQL injection vulnerability exists in SourceCodester Online Student Result System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /login.php,...

PT-2025-41688

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Result System version 1.0 Description A SQL injection issue exists in the SourceCodester Online Student Result System 1.0. The flaw is located in the /login.php script, where manipulating the Username parameter ca...

CVE-2025-62158

Frappe Learning is a learning system that helps users structure their content. In versions prior to 2.38.0, the system did stored the attachments uploaded by the students in their assignments as public files. This issue potentially exposed student-uploaded files to the public. Anyone with the fil...