CVE-2025-11047 Portabilis i-Educar aluno improper authorization

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /module/Api/aluno. This manipulation of the argument alunoid causes improper authorization. The attack may be initiated remotely. The exploit has been made available to the public and cou...

CVE-2025-10467

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Stored XSS. This issue affects OBS Student Affairs Information System: before v25.0401...

CVE-2025-10467

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Stored XSS. This issue affects OBS Student Affairs Information System: before v25.0401...

CVE-2025-10467

CVE-2025-10467 affects PROLIZ OBS (Student Affairs Information System) prior to version 25.0401. The issue is a Stored XSS caused by improper neutralization of input during web page generation in OBS. Impact, per CVSS: high confidentiality and integrity impact, low availability impact, with netwo...

CVE-2025-10467 Stored XSS in Proliz Software's OBS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Stored XSS. This issue affects OBS Student Affairs Information System: before v25.0401...

CVE-2025-10467 Stored XSS in Proliz Software's OBS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Stored XSS. This issue affects OBS Student Affairs Information System: before v25.0401...

CVE-2025-10848

A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown processing of the file /checkstudent.php. Such manipulation of the argument studentid leads to sql injection. The attack may be performed from remote. The exploit is publicly...

PT-2025-39371

Name of the Vulnerable Software and Affected Versions PROLIZ OBS Student Affairs Information System versions prior to 25.0401 Description A Stored Cross-site Scripting XSS issue exists in PROLIZ OBS Student Affairs Information System. This allows attackers to execute malicious scripts. The issue ...

PROLIZ Student Information System 跨站脚本漏洞

PROLIZ Student Information System is a student information management system from the Turkish company PROLIZ. A cross-site scripting vulnerability exists in PROLIZ Student Information System versions prior to v25.0401, which stems from improper input neutralization during web page generation and...

CVE-2025-0875

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Parameter Injection.This issue affects OBS Student Affairs Information System: before v26.0328...

CVE-2025-10848

A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown processing of the file /checkstudent.php. Such manipulation of the argument studentid leads to sql injection. The attack may be performed from remote. The exploit is publicly...

CVE-2025-10848 Campcodes Society Membership Information System check_student.php sql injection

A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown processing of the file /checkstudent.php. Such manipulation of the argument studentid leads to sql injection. The attack may be performed from remote. The exploit is publicly...

CVE-2025-10848

CVE-2025-10848 affects Campcodes Society Membership Information System 1.0. The vulnerability arises from improper handling of the parameter student_id in the file /check_student.php , enabling remote SQL injection . Multiple sources note the exploit is publicly available, indicating potential ac...

PT-2025-39151

Name of the Vulnerable Software and Affected Versions Campcodes Society Membership Information System version 1.0 Description A flaw exists in Campcodes Society Membership Information System that allows for remote SQL injection. The issue stems from improper handling of the student id argument...

CampCodes Society Membership Information System SQL注入漏洞

CampCodes Society Membership Information System is a society membership information system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in the CampCodes Society Membership Information System version 1.0, which stems from an incorrect manipulation of the parameter studenti...

CVE-2025-0875

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Parameter Injection. This issue affects OBS Student Affairs Information System: before v26.0328...

CVE-2025-0875

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Parameter Injection. This issue affects OBS Student Affairs Information System: before v26.0328...

CVE-2025-0875

Summary: CVE-2025-0875 affects PROLIZ OBS (Student Affairs Information System) prior to version 26.0328. The issue is an authorization bypass caused by a user-controlled key, enabling parameter injection. The vulnerability impact includes a potential bypass of access controls with high privileges...

CVE-2025-0875 IDOR in Proliz Software's OBS

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Parameter Injection. This issue affects OBS Student Affairs Information System: before v26.0328...

CVE-2025-0875 IDOR in Proliz Software's OBS

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Parameter Injection. This issue affects OBS Student Affairs Information System: before v26.0328...