Lucene search
+L

4535 matches found

OSV
OSV
added 2025/06/04 6:15 p.m.11 views

CVE-2025-5599

A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3. This vulnerability affects unknown code of the file /editmyexp.php. The manipulation of the argument emp1ctc leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00394EPSS
SaveExploits1References5
NVD
NVD
added 2025/06/04 6:15 p.m.16 views

CVE-2025-5599

A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3. This vulnerability affects unknown code of the file /editmyexp.php. The manipulation of the argument emp1ctc leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS0.00394EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/06/04 5:31 p.m.21 views

CVE-2025-5599 PHPGurukul Student Result Management System editmyexp.php sql injection

A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3. This vulnerability affects unknown code of the file /editmyexp.php. The manipulation of the argument emp1ctc leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS0.00394EPSS
SaveExploits1References5
CVE
CVE
added 2025/06/04 5:31 p.m.58 views

CVE-2025-5599

CVE-2025-5599 affects PHPGurukul Student Result Management System 1.3. The vulnerability resides in /editmyexp.php where manipulation of the emp1ctc parameter enables SQL injection. The issue can be exploited remotely and has public disclosure. Impact is described as high for confidentiality, int...

9.8CVSS7.6AI score0.00394EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/06/04 12:0 a.m.8 views

PHPGurukul Student Result Management System 安全漏洞

PHPGurukul Student Result Management System is a student result management system from PHPGurukul Inc. A security vulnerability exists in PHPGurukul Student Result Management System version 1.3, which is caused by a SQL injection due to incorrect manipulation of parameter emp1ctc in file...

9.8CVSS7.8AI score0.00394EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/06/04 12:0 a.m.10 views

PT-2025-23834 · Unknown · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 1.3 Description: A critical issue was found in the PHPGurukul Student Result Management System. The problem affects the file /editmyexp.php and is related to the manipulation of the emp1ctc...

9.8CVSS7.5AI score0.00394EPSS
SaveExploits1References10
OSV
OSV
added 2025/06/02 4:15 p.m.4 views

CVE-2024-57459

A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands...

7.3CVSS5.9AI score0.00211EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/02 12:0 a.m.5 views

CloudClassroom-PHP-Project SQL注入漏洞

CloudClassroom-PHP-Project is a cloud classroom website by the individual developer Vishal Mathur. A security vulnerability exists in CloudClassroom-PHP-Project version 1.0, which stems from insufficient validation of the myds parameter in mydetailsstudent.php, which could lead to a SQL injection...

7.3CVSS7.6AI score0.00211EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/05/31 12:0 a.m.5 views

XueShengZhuSu 路径遍历漏洞

XueShengZhuSu is a software used for student accommodation management by a Chinese ashinigit individual developer. A path traversal vulnerability exists in XueShengZhuSu, which is caused by a path traversal vulnerability due to misuse of the File parameter in the file /upload/...

6.5CVSS6.5AI score0.00348EPSS
SaveExploits0References6
CNVD
CNVD
added 2025/05/30 12:0 a.m.8 views

Student Record System /login.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID in the file /login.php. An attacker can exploit this vulnerability to execute...

9.8CVSS8.2AI score0.00491EPSS
SaveExploits1References1
Packet Storm
Packet Storm
added 2025/05/30 12:0 a.m.99 views

📄 Unifiedtransform 2.x Student Editor Missing Authorization

Unifiedtransform version 2.x allows any user to access and modify student records via the /students/edit/id endpoints. Description Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Any user students and teachers can access and modify student records via the /students/edit/id...

6.5CVSS7.3AI score0.0032EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2025/05/28 1:46 p.m.11 views

CVE-2025-40650

Insecure Direct Object Reference IDOR vulnerability in Clickedu. This vulnerability could allow an attacker to retrieve information about student report cards...

8.7CVSS6.5AI score0.00305EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/27 5:15 a.m.16 views

CVE-2025-5232

A vulnerability, which was classified as critical, has been found in PHPGurukul Student Study Center Management System 1.0. This issue affects some unknown processing of the file /admin/report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiate...

7.2CVSS0.00362EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/05/27 5:0 a.m.22 views

CVE-2025-5232 PHPGurukul Student Study Center Management System report.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Student Study Center Management System 1.0. This issue affects some unknown processing of the file /admin/report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiate...

5.8CVSS0.00362EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/27 5:0 a.m.55 views

CVE-2025-5232

PHPGurukul Student Study Center Management System 1.0 has a SQL injection in /admin/report.php caused by improper handling of fromdate/todate parameters. The vulnerability is exploitable remotely and has been publicly disclosed; exploitation details are present across multiple sources. Root cause...

7.2CVSS7.6AI score0.00362EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2025/05/27 1:15 a.m.21 views

CVE-2025-5216

A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS0.00491EPSS
SaveExploits1References5
OSV
OSV
added 2025/05/27 1:15 a.m.7 views

CVE-2025-5216

A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS5.8AI score0.00491EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/05/27 12:31 a.m.23 views

CVE-2025-5216 PHPGurukul Student Record System login.php sql injection

A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

7.5CVSS0.00491EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/27 12:31 a.m.49 views

CVE-2025-5216

CVE-2025-5216 affects PHPGurukul Student Record System v3.20. The /login.php file processes the ID parameter without proper validation, leading to an SQL injection in remote attacker-controlled input. This vulnerability could allow an attacker to execute arbitrary SQL commands, potentially access...

9.8CVSS7.6AI score0.00491EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/27 12:31 a.m.11 views

CVE-2025-5216 PHPGurukul Student Record System login.php sql injection

A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

7.5CVSS7.5AI score0.00491EPSS
SaveExploits1References5
Rows per page
Query Builder