Lucene search
+L

5590 matches found

Cvelist
Cvelist
•added 2025/11/24 3:32 a.m.•45 views

CVE-2025-13581 itsourcecode Student Information System schedule_edit1.php sql injection

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

6.5CVSS0.00308EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/24 3:32 a.m.•7 views

CVE-2025-13581 itsourcecode Student Information System schedule_edit1.php sql injection

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

6.5CVSS6.5AI score0.00308EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/24 3:32 a.m.•31 views

CVE-2025-13581

Summary of CVE-2025-13581 (itsourcecode Student Information System 1.0): The vulnerability resides in an unknown functionality of the file /schedule_edit1.php where manipulating the argument schedule_id enables an SQL injection. It can be exploited remotely, and publicly available exploit materia...

8.8CVSS6.5AI score0.00308EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•25 views

PT-2025-47888

A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirm password causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

5.8CVSS5.2AI score0.0032EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•22 views

PT-2025-47876

Name of the Vulnerable Software and Affected Versions itsourcecode Student Information System version 1.0 Description A flaw exists in itsourcecode Student Information System that allows for remote manipulation of the schedule id argument within the /schedule edit1.php file, leading to a SQL...

8.8CVSS6.5AI score0.00308EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/24 12:00 a.m.•3 views

CVE-2025-13581: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /scheduleedit1.php. Such manipulation of the argument scheduleid leads to sql injection. The attack may be launched remotely. The exploit is public...

8.8CVSS6.6AI score0.00308EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/24 12:00 a.m.•5 views

CVE-2025-13586: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirmpassword causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.2CVSS5.2AI score0.0032EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•19 views

Itsourcecode Student Information System SQL Injection Vulnerability

itsourcecode Student Information System is an itsourcecode open source student information system. The SQL injection vulnerability exists in itsourcecode Student Information System version 1.0, which stems from an incorrect manipulation of the scheduleid parameter in the file /scheduleedit1.php,...

8.8CVSS6.5AI score0.00308EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•18 views

SourceCodester Online Student Clearance System SQL Injection Vulnerability

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. A SQL injection vulnerability exists in SourceCodester Online Student Clearance System version 1.0, which stems from incorrect manipulation of the parameter txtconfirmpassword in the...

7.2CVSS5.3AI score0.0032EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/11/23 6:30 p.m.•18 views

EUVD-2025-198575

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public and...

7.5CVSS7.2AI score0.00387EPSS
SaveExploits1References6
NVD
NVD
•added 2025/11/23 4:15 p.m.•16 views

CVE-2025-13555

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public an...

9.8CVSS0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/23 12:00 a.m.•17 views

CampCodes School File Management System SQL Injection Vulnerability

CampCodes School File Management System is a school file management system from CampCodes Philippines. A SQL injection vulnerability exists in Campcodes School File Management System version 1.0, which stems from the incorrect operation of the parameter studentno in the file /index.php, which may...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References6
CNVD
CNVD
•added 2025/11/20 12:00 a.m.•28 views

Student Record System manage-students.php Component Cross-Site Request Forgery Vulnerability

Student Record System is a software application. Student Record System suffers from a cross-site request forgery vulnerability that stems from the manage-students.php component not adequately verifying that a request is from a trusted user, which could be exploited by an attacker to cause...

7.5CVSS5.7AI score0.00245EPSS
SaveExploits2References1
CNVD
CNVD
•added 2025/11/20 12:00 a.m.•25 views

School Fees Payment Management System /ajax.php?action=save_student file SQL injection vulnerability

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file...

9.8CVSS6.8AI score0.0035EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/19 12:11 a.m.•32 views

CVE-2025-63892

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS4.4AI score0.00386EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/19 12:10 a.m.•29 views

CVE-2025-13325

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

8.8CVSS6.4AI score0.00335EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/11/18 7:15 p.m.•26 views

CVE-2025-63955

A Cross-Site Request Forgery CSRF vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submitting a forged request. This leads to the unauthorized deletion of user accounts, causing a Denial of...

7.5CVSS5.8AI score0.00245EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2025/11/18 4:55 p.m.•20 views

CVE-2025-13289

A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /TeacherLogin/Academics/SubjectDetails.php. The manipulation of the argument SubCode results in sql injection. The attack may be performed from...

8.8CVSS6.5AI score0.00332EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/18 3:30 p.m.•21 views

EUVD-2025-198003

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS3.7AI score0.00386EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/11/18 3:16 p.m.•22 views

CVE-2025-63892

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS3.7AI score0.00386EPSS
SaveExploits1References3
Rows per page
Query Builder