Lucene search
+L

4538 matches found

Positive Technologies
Positive Technologies
added 2025/06/30 12:0 a.m.13 views

PT-2025-27452 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.2 Description: A critical issue was found in the PHPGurukul Student Record System, affecting an unknown functionality of the file /edit-student.php. The manipulation of the fmarks2 argument leads to...

8.8CVSS8.1AI score0.00325EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/06/30 12:0 a.m.9 views

PHPGurukul Student Record System 注入漏洞

PHPGurukul Student Record System is an application from PHPGurukul Inc. An injection vulnerability exists in version 3.2 of the PHPGurukul Student Record System, which results from SQL injection due to incorrect manipulation of parameter fmarks2 in file /edit-student.php...

8.8CVSS6.9AI score0.00325EPSS
SaveExploits1References6
OSV
OSV
added 2025/06/29 12:15 a.m.16 views

CVE-2025-6835

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student-issue-book.php. The manipulation of the argument reg leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00399EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/06/29 12:0 a.m.6 views

CVE-2025-6835 code-projects Library System student-issue-book.php sql injection

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student-issue-book.php. The manipulation of the argument reg leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS7.5AI score0.00399EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/29 12:0 a.m.12 views

Code-Projects Library System 注入漏洞

Library System is a library system. The Library System suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter reg in the file /student-issue-book.php. An attacker can exploit this vulnerability to execute illeg...

9.8CVSS8.2AI score0.00399EPSS
SaveExploits1References6
Packet Storm News
Packet Storm News
added 2025/06/27 12:0 a.m.4 views

ARMOR: Robust Reinforcement Learning-Based Control for UAVs under Physical Attacks

Unmanned Aerial Vehicles UAVs depend on onboard sensors for perception, navigation, and control. However, these sensors are susceptible to physical attacks, such as GPS spoofing, that can corrupt state estimates and lead to unsafe behavior. While reinforcement learning RL offers adaptive control...

6.6AI score
SaveExploits0
CNVD
CNVD
added 2025/06/27 12:0 a.m.7 views

School Fees Payment System student.php File SQL Injection Vulnerability

School Fees Payment System is a tuition payment system. The School Fees Payment System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /student.php. An attacker can exploit this vulnerability...

9.8CVSS8.2AI score0.017EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.4 views

Hostel Management System /contact_manager.php File SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter studentrollno in the file /contactmanager.php. An attacker can use this...

9.8CVSS8.3AI score0.00415EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.8 views

School Fees Payment System student.php File Cross-Site Scripting Vulnerability

School Fees Payment System is a tuition payment system. School Fees Payment System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the sname/contact/about/emailid/transcationremark parameter of the student.php...

6.1CVSS6.5AI score0.00327EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.12 views

Student Record system Using PHP and MySQL SQL Injection Vulnerability

Student Record system Using PHP and MySQL is a student record system based on php and mysql. A SQL injection vulnerability exists in Student Record system Using PHP and MySQL, which stems from the lack of validation of externally entered SQL statements for variables $cshortname, $cfullname, and...

7.1CVSS8.3AI score0.00282EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2025/06/26 12:0 a.m.4 views

VulnCheck KEV: CVE-2021-41691

A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via the "studentid" and "TRANSFERSCHOOL" parameters in POST request sent to /TransferredOutModal.php...

9.8CVSS5.9AI score0.01723EPSS
SaveIn wildExploits0References2
GithubExploit
GithubExploit
added 2025/06/25 5:44 p.m.94 views

Exploit for CVE-2025-51046

CVE-2025-51046 - Remote File Upload Vulnerability in SourceCod...

9.2AI score
SaveExploits1
OSV
OSV
added 2025/06/25 3:15 p.m.10 views

CVE-2024-27685

SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $cfullname, and $cdate variables...

7.1CVSS5.9AI score0.00282EPSS
SaveExploits0References2
NVD
NVD
added 2025/06/25 3:15 p.m.14 views

CVE-2024-27685

SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $cfullname, and $cdate variables...

7.1CVSS0.00282EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/06/25 12:0 a.m.8 views

CVE-2024-27685

SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $cfullname, and $cdate variables...

7.8AI score0.00282EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/25 12:0 a.m.12 views

PHPGurukul Student Record system Using PHP and MySQL SQL注入漏洞

Student Record system Using PHP and MySQL is a student record system based on php and mysql. A SQL injection vulnerability exists in Student Record system Using PHP and MySQL, which stems from the lack of validation of externally entered SQL statements for variables $cshortname, $cfullname, and...

7.1CVSS8.1AI score0.00282EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/06/25 12:0 a.m.21 views

CVE-2024-27685

SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $cfullname, and $cdate variables...

0.00282EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/06/25 12:0 a.m.23 views

PT-2025-26833 · Unknown · Student Record System Using Php/Mysql

Name of the Vulnerable Software and Affected Versions: Student Record system Using PHP and MySQL version 3.20 Description: The issue allows a remote attacker to obtain sensitive information via a crafted payload to the cshortname, cfullname, and cdate variables. This is a SQL Injection...

7.1CVSS6.9AI score0.00282EPSS
SaveExploits0References7
CVE
CVE
added 2025/06/25 12:0 a.m.38 views

CVE-2024-27685

CVE-2024-27685 describes a SQL injection in the “Student Record system Using PHP and MySQL v3.20” caused by lack of validation in the variables $cshortname, $cfullname, and $cdate. The vulnerability could allow a remote attacker to exfiltrate sensitive data (as reported across multiple trackers: ...

7.1CVSS7.8AI score0.00282EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/06/24 3:15 p.m.10 views

CVE-2025-6569

A vulnerability classified as problematic was found in code-projects School Fees Payment System 1.0. Affected by this vulnerability is an unknown functionality of the file /student.php. The manipulation of the argument sname/contact/about/emailid/transcationremark leads to cross site scripting. T...

6.1CVSS3.7AI score0.00327EPSS
SaveExploits1References5
Rows per page
Query Builder