CVE-2024-6191

CVE-2024-6191 affects itsourcecode Student Management System 1.0, specifically the Login Page login.php. The vulnerability is a SQL injection caused by unsafely handling the user parameter, exploitable remotely. Public disclosure has occurred. The connected sources discuss remote impact and the n...

CVE-2024-6191 itsourcecode Student Management System Login Page login.php sql injection

A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The...

PT-2024-37444 · Unknown · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Management System version 1.0 Description: A critical vulnerability has been found in the itsourcecode Student Management System, affecting the login page, specifically the file login.php. The manipulation of the user...

PT-2024-37454 · Sourcecodester · Sourcecodester Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Attendance System version 1.0 Description: A vulnerability was found in the function get student of the file student form.php. The manipulation of the argument id leads to cross-site scripting. The attack may be...

Student Management System SQL Injection Vulnerability

Student Management System is a simple web-based student management software by Sk. Amir Hamza, an individual developer in Bangladesh. A SQL injection vulnerability exists in itsourcecode Student Management System version 1.0, which originates from the login.php in the component Login that contain...

Simple Student Attendance System Cross-Site Scripting Vulnerability

Simple Student Attendance System is a simple student attendance system. A cross-site scripting vulnerability exists in SourceCodester Simple Student Attendance System version 1.0, which stems from a security issue in the getstudent function in studentform.php, which is vulnerable to a cross-site...

sheffieldstudenthousing.co.uk Cross Site Scripting vulnerability OBB-3934973

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-34690

SAP Student Life Cycle Management SLcM fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to access and edit non-sensitive report variants that are typically restricted,...

CVE-2024-34690 Missing Authorization check in SAP Student Life Cycle Management (SLcM)

SAP Student Life Cycle Management SLcM fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to access and edit non-sensitive report variants that are typically restricted,...

SAP Student Life Cycle Management Security Vulnerability

SAP Student Life Cycle Management is a student life cycle management system from SAP, Germany. A security vulnerability exists in SAP Student Life Cycle Management that stems from a failure to perform proper authorization checks on authenticated users, resulting in an escalation of privileges tha...

WordPress Sensei Pro (WC Paid Courses) Plugin <= 4.23.1.1.23.1 is vulnerable to Cross Site Scripting (XSS)

Software Sensei Pro WC Paid Courses Type Plugin Vulnerable versions = 4.23.1.1.23.1 Fixed in 4.24.0.1.24.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34765 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID ffa624f39abc Credits Rafie...

CVE-2024-33802

A SQL injection vulnerability in /model/getstudentsubject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter...

PT-2024-25489 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue exists in the /model/get student subject.php file, allowing an attacker to execute arbitrary SQL commands by manipulating the index parameter...

Online Student Enrollment System SQL Injection Vulnerability (CNVD-2024-26367)

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. A SQL injection vulnerability exists in Online Student Enrollment System version 1.0, which can be exploited by an attacker to view, add, modify, or delete information in the back-en...

Online Student Enrollment System SQL Injection Vulnerability

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. A SQL injection vulnerability exists in Online Student Enrollment System version 1.0, which can be exploited by an attacker to send a specially crafted SQL statement to the...

Online Student Enrollment System SQL Injection Vulnerability (CNVD-2024-26369)

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. A SQL injection vulnerability exists in Online Student Enrollment System version 1.0, which can be exploited by an attacker to view, add, modify, or delete information in the back-en...

Online Student Enrollment System SQL Injection Vulnerability (CNVD-2024-26372)

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. Online Student Enrollment System suffers from a SQL injection vulnerability that can be exploited by an attacker to view, add, modify, or delete information in the back-end database ...

Online Student Enrollment System SQL Injection Vulnerability (CNVD-2024-26370)

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. A SQL injection vulnerability exists in Online Student Enrollment System version 1.0, which can be exploited by an attacker to view, add, modify, or delete information in the back-en...

CVE-2024-5396

A vulnerability classified as critical has been found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file newfaculty.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-5397

A vulnerability classified as critical was found in itsourcecode Online Student Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file instructorSubjects.php. The manipulation of the argument instructorId leads to sql injection. The attack can be launched...