Lucene search
+L

5594 matches found

Cvelist
Cvelist
•added 2025/10/09 6:02 p.m.•30 views

CVE-2025-11551 code-projects Student Result Manager Database.java sql injection

A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manipulation of the argument roll/name/gpa causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

6.5CVSS0.00398EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/10/09 5:10 a.m.•23 views

CVE-2025-11434

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

9.8CVSS7.1AI score0.00421EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•11 views

PT-2025-41446

Name of the Vulnerable Software and Affected Versions Student Result Manager version 1.0 Description A flaw exists in Student Result Manager version 1.0 that allows for remote execution of SQL injection attacks. The issue stems from manipulating the roll, name, or gpa arguments within the...

9.8CVSS6.4AI score0.00398EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/10/09 12:00 a.m.•15 views

Code-Projects Student Result Manager Security Vulnerabilities

Code-Projects Student Result Manager is a student result management tool from Code-Projects. A security vulnerability exists in Code-Projects Student Result Manager version 1.0, which stems from an incorrect manipulation of the parameter roll/name/gpa in the file src/students/Database.java, which...

9.8CVSS6.5AI score0.00398EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•8 views

CVE-2025-11551: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manipulation of the argument roll/name/gpa causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

9.8CVSS6.5AI score0.00398EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/10/08 8:19 p.m.•22 views

CVE-2025-11118

A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...

9.8CVSS7.2AI score0.00478EPSS
SaveExploits1References1
NVD
NVD
•added 2025/10/08 5:15 p.m.•22 views

CVE-2025-11485

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function adduser of the file /admin.php of the component Manage Users Page. This manipulation of the argument firstname/lastname causes cross site scripting. The attack can be initiated remotely...

4.8CVSS0.00295EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/08 5:02 p.m.•35 views

CVE-2025-11485 SourceCodester Student Grades Management System Manage Users admin.php add_user cross site scripting

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function adduser of the file /admin.php of the component Manage Users Page. This manipulation of the argument firstname/lastname causes cross site scripting. The attack can be initiated remotely...

4.8CVSS0.00295EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/08 5:02 p.m.•41 views

CVE-2025-11485

CVE-2025-11485 affects SourceCodester Student Grades Management System 1.0, specifically the add_user function in /admin.php within the Manage Users Page. The vulnerability arises from manipulating the first_name/last_name parameters, enabling cross-site scripting (XSS). The issue can be exploite...

4.8CVSS3.4AI score0.00295EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/08 5:02 p.m.•27 views

CVE-2025-11485 SourceCodester Student Grades Management System Manage Users admin.php add_user cross site scripting

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function adduser of the file /admin.php of the component Manage Users Page. This manipulation of the argument firstname/lastname causes cross site scripting. The attack can be initiated remotely...

4.8CVSS3.4AI score0.00295EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/08 5:02 p.m.•24 views

EUVD-2025-33292

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function adduser of the file /admin.php of the component Manage Users Page. This manipulation of the argument firstname/lastname causes cross site scripting. The attack can be initiated remotely...

4.8CVSS3.4AI score0.00295EPSS
SaveExploits1References7
NVD
NVD
•added 2025/10/08 5:15 a.m.•29 views

CVE-2025-11434

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

9.8CVSS0.00421EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/10/08 5:15 a.m.•19 views

CVE-2025-11434

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

9.8CVSS7.1AI score0.00421EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/08 5:02 a.m.•38 views

CVE-2025-11434 itsourcecode Student Transcript Processing System login.php sql injection

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

7.5CVSS0.00421EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/08 5:02 a.m.•42 views

CVE-2025-11434

Summary: CVE-2025-11434 affects itsourcecode’s Student Transcript Processing System v1.0, with a SQL injection flaw in the /login.php file via the uname parameter. The issue can be exploited remotely and publicly available exploit code exists. Several sources corroborate the impact and exposure, ...

9.8CVSS7.1AI score0.00421EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2025/10/08 5:02 a.m.•21 views

CVE-2025-11434

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

9.8CVSS7.1AI score0.00421EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/08 5:02 a.m.•11 views

CVE-2025-11434 itsourcecode Student Transcript Processing System login.php sql injection

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

7.5CVSS7.1AI score0.00421EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/10/08 3:17 a.m.•28 views

CVE-2025-11347

A vulnerability was found in code-projects Student Crud Operation up to 3.3. This vulnerability affects the function moveuploadedfile of the file add.php of the component Add Student Page/Edit Student Page. Performing manipulation results in unrestricted upload. The attack can be initiated...

7.5CVSS6.7AI score0.00532EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/08 12:00 a.m.•27 views

PT-2025-41290

Name of the Vulnerable Software and Affected Versions SourceCodester Student Grades Management System version 1.0 Description A security issue exists in SourceCodester Student Grades Management System. The add user function within the /admin.php file, specifically in the Manage Users Page...

4.8CVSS4.2AI score0.00295EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/10/08 12:00 a.m.•24 views

SourceCodester Student Grades Management System Security Vulnerabilities

SourceCodester Student Grades Management System is a SourceCodester open source student grades management system. A security vulnerability exists in SourceCodester Student Grades Management System version 1.0, which originates from an incorrect manipulation of the parameters firstname and lastnam...

4.8CVSS4.8AI score0.00295EPSS
SaveExploits1References5
Rows per page
Query Builder