Lucene search
+L

4535 matches found

CNNVD
CNNVD
added 2025/05/27 12:0 a.m.5 views

PHPGurukul Student Study Center Management System 注入漏洞

PHPGurukul Student Study Center Management System is a student study center management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Student Study Center Management System, which is caused by a SQL injection due to incorrect manipulation of the...

7.2CVSS5.6AI score0.00362EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/05/27 12:0 a.m.9 views

PT-2025-22945 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.20 Description: A critical vulnerability was found in the PHPGurukul Student Record System, affecting the file /login.php. The manipulation of the ID argument leads to SQL injection. The attack can b...

9.8CVSS7.6AI score0.00491EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/05/27 12:0 a.m.8 views

PHPGurukul Student Record System 注入漏洞

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID in the file /login.php. An attacker can exploit this vulnerability to execute...

9.8CVSS7.9AI score0.00491EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/05/27 12:0 a.m.7 views

PT-2025-22965 · Unknown · Phpgurukul Student Study Center Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Study Center Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Student Study Center Management System. This issue affects the processing of the file /admin/report.php. The...

7.2CVSS5.5AI score0.00362EPSS
SaveExploits1References10
NVD
NVD
added 2025/05/26 1:15 p.m.14 views

CVE-2025-40650

Insecure Direct Object Reference IDOR vulnerability in Clickedu. This vulnerability could allow an attacker to retrieve information about student report cards...

8.7CVSS0.00305EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/26 12:51 p.m.8 views

CVE-2025-40650 Insecure Direct Object Reference (IDOR) in Clickedu

Insecure Direct Object Reference IDOR vulnerability in Clickedu. This vulnerability could allow an attacker to retrieve information about student report cards...

8.7CVSS6.5AI score0.00305EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/26 12:51 p.m.18 views

CVE-2025-40650 Insecure Direct Object Reference (IDOR) in Clickedu

Insecure Direct Object Reference IDOR vulnerability in Clickedu. This vulnerability could allow an attacker to retrieve information about student report cards...

8.7CVSS0.00305EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/26 12:51 p.m.49 views

CVE-2025-40650

CVE-2025-40650 corresponds to an Insecure Direct Object Reference (IDOR) vulnerability in the Clickedu platform. Multiple sources describe that an attacker could retrieve information about student report cards, due to improper access control on object references. The issue is rooted in IDOR logic...

8.7CVSS6.2AI score0.00305EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/26 12:0 a.m.12 views

PT-2025-22893 · Clickedu · Clickedu

Name of the Vulnerable Software and Affected Versions: Clickedu versions all versions Description: The issue is related to an Insecure Direct Object Reference IDOR vulnerability. This could allow an attacker to retrieve information about student report cards. Recommendations: At the moment, there...

8.7CVSS6AI score0.00305EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2025/05/25 12:18 a.m.13 views

CVE-2024-51102

PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/login.php via the username and password parameters...

4.4CVSS8.7AI score0.00186EPSS
SaveExploits1
OSV
OSV
added 2025/05/23 6:15 p.m.6 views

CVE-2024-51102

PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/login.php via the username and password parameters...

4.4CVSS5.8AI score0.00186EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/23 6:15 p.m.16 views

CVE-2024-51102

PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/login.php via the username and password parameters...

4.4CVSS0.00186EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/23 4:15 p.m.6 views

CVE-2024-51103

PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/password-recovery.php via the emailid and id parameters...

6.5CVSS5.8AI score0.00336EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/23 4:15 p.m.11 views

CVE-2024-51103

PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/password-recovery.php via the emailid and id parameters...

6.5CVSS0.00336EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 11:57 a.m.13 views

CVE-2025-0212

A vulnerability was found in Campcodes Student Grading System 1.0. It has been classified as critical. This affects an unknown part of the file /viewstudents.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS7.3AI score0.00518EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 11:34 a.m.15 views

CVE-2025-0203

A vulnerability was found in code-projects Student Management System 1.0. It has been declared as critical. This vulnerability affects the function showSubject1 of the file /config/DbFunction.php. The manipulation of the argument sid leads to sql injection. The attack can be initiated remotely. T...

9.8CVSS7.3AI score0.00595EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:41 a.m.10 views

CVE-2024-48656

Cross Site Scripting vulnerability in student management system in php with source code v.1.0.0 allows a remote attacker to execute arbitrary code...

5.4CVSS7.3AI score0.00426EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:24 a.m.8 views

CVE-2024-41250

An Incorrect Access Control vulnerability was found in /smsa/viewstudents.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view STUDENT details...

5.3CVSS7.1AI score0.00485EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 10:11 a.m.6 views

CVE-2024-3528

A vulnerability was found in Campcodes Complete Online Student Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file unitsview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be launche...

6.1CVSS6.2AI score0.00667EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 9:55 a.m.7 views

CVE-2024-28816

Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php...

7.1CVSS8AI score0.00463EPSS
SaveExploits0References1
Rows per page
Query Builder