PHPGurukul Student Record System security vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the sub1, sub2, sub3, sub4, and course-short parameters of add-subject.php. An attacker can exploit this...

CVE-2025-13057

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...

CVE-2025-64705

Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to version 2.41.0, users were able to access the submissions made by other students The issue has been fixed in version 2.41.0 by ensuring proper roles and redirecting if accessed vi...

CVE-2025-64705 Frappe user was able to access the submission of other students

Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to version 2.41.0, users were able to access the submissions made by other students The issue has been fixed in version 2.41.0 by ensuring proper roles and redirecting if accessed vi...

CVE-2025-13057

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...

CVE-2025-13057

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...

CVE-2025-13057

Campcodes School Fees Payment Management System 1.0 is affected by a SQL injection in the /ajax.php?action=save_student handler, triggered by manipulating the ID parameter. The vulnerability is treatable as remote and exploitable without authentication in affected deployments; multiple sources re...

CVE-2025-13057 Campcodes School Fees Payment Management System ajax.php sql injection

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...

PT-2025-46686

Name of the Vulnerable Software and Affected Versions Campcodes School Fees Payment Management System version 1.0 Description A flaw exists in Campcodes School Fees Payment Management System 1.0. The issue involves the manipulation of the ID argument in the file '/ajax.php?action=save student',...

Frappe Learning information leakage vulnerability

Frappe Learning is an easy-to-use open source learning management system from Frappe Open Source. An information disclosure vulnerability exists in Frappe Learning version 2.0.0 through versions prior to 2.41.0, which stems from improper access control and could lead to viewing other students'...

CVE-2025-11956

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Stored XSS.This issue affects OBS Student Affairs Information System: before 25.0401...

EUVD-2025-37982

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Stored XSS.This issue affects OBS Student Affairs Information System: before 25.0401...

CVE-2025-11956

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Stored XSS. This issue affects OBS Student Affairs Information System: before 25.0401...

CVE-2025-11956 XSS in Proliz's OBS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Stored XSS. This issue affects OBS Student Affairs Information System: before 25.0401...

CVE-2025-11956

Proliz OBS (Student Affairs Information System) is affected up to version 25.0401. The vulnerability is a Stored XSS caused by improper neutralization of input during web page generation, enabling injection of untrusted data that persists in the system. Affected component: OBS web page generation...

CVE-2025-11956

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Stored XSS. This issue affects OBS Student Affairs Information System: before 25.0401...

CVE-2025-11956 XSS in Proliz's OBS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Stored XSS. This issue affects OBS Student Affairs Information System: before 25.0401...

PT-2025-45185

Name of the Vulnerable Software and Affected Versions Proliz Software Ltd. Co. OBS Student Affairs Information System versions prior to 25.0401 Description An Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting XSS condition, exists in...

CVE-2025-11956: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Stored XSS. This issue affects OBS Student Affairs Information System: before 25.0401...

PROLIZ OBS Cross-Site Scripting Vulnerability

PROLIZ OBS is a student information system from PROLIZ Turkey. A cross-site scripting vulnerability exists in Proliz OBS versions prior to 25.0401 that stems from improper input neutralization during web page generation and could lead to a stored cross-site scripting attack...