4532 matches found
Student Enrollment In PHP Security Vulnerability
Student Enrollment In PHP is an open source student enrollment system by code-projects. A security vulnerability exists in Student Enrollment In PHP v1.0, which is caused by an arbitrary file upload vulnerability in the Update or Edit Student Avatar feature, which can be exploited to execute...
PT-2024-18429 · Sourcecodester · Sourcecodester Web-Based Student Clearance System
Name of the Vulnerable Software and Affected Versions: SourceCodester Web-Based Student Clearance System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /Admin/login.php. The manipulation of the txtpassword argument leads to SQL...
Simple Student Attendance System SQL Injection Vulnerability
Simple Student Attendance System is a simple student attendance system. A SQL injection vulnerability exists in Simple Student Attendance System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...
student-baseball.or.jp Cross Site Scripting vulnerability OBB-3859724
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2024-12943 · Unknown · Student Enrollment In Php
Name of the Vulnerable Software and Affected Versions: Student Enrollment In PHP version 1.0 Description: An arbitrary file upload vulnerability in the Update/Edit Student's Profile Picture function allows attackers to execute arbitrary code via uploading a crafted PHP file. This issue enables...
A Vending Machine Error Revealed Secret Face Recognition Tech
A student investigation at the University of Waterloo uncovered a system that scanned countless undergrads without consent...
Cross site scripting
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&classid=1. The manipulation of the argument classdate with the input 2024-02-23%22%3E%3Cscript%3Ealert1%3C/script%3E...
CVE-2024-1834 SourceCodester Simple Student Attendance System ?page=attendance&class_id=1 cross site scripting
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&classid=1. The manipulation of the argument classdate with the input 2024-02-23%22%3E%3Cscript%3Ealert1%3C/script%3E...
CVE-2024-1834
The CVE-2024-1834 entry describes a cross-site scripting (XSS) vulnerability in SourceCodester Simple Student Attendance System 1.0, affecting an unknown portion of the file at the endpoint ?page=attendance&class_id=1. By manipulating the class_date (examples show 2024-02-23%22%3E%3Cscript%3Ealer...
CVE-2024-1834 SourceCodester Simple Student Attendance System ?page=attendance&class_id=1 cross site scripting
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&classid=1. The manipulation of the argument classdate with the input 2024-02-23%22%3E%3Cscript%3Ealert1%3C/script%3E...
CVE-2024-1829 code-projects Library System registration.php sql injection
A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injectio...
CVE-2024-1826 code-projects Library System login.php sql injection
A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file Source/librarian/user/student/login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated...
Simple Student Attendance System Cross-Site Scripting Vulnerability
Simple Student Attendance System is a simple student attendance system. A cross-site scripting vulnerability exists in SourceCodester Simple Student Attendance System version 1.0, which stems from the presence of an unknown section of the page that uses special inputs to cause cross-site scriptin...
PT-2024-18349 · Sourcecodester · Sourcecodester Simple Student Attendance System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Attendance System version 1.0 Description: A vulnerability was found in the SourceCodester Simple Student Attendance System, which has been classified as problematic. This issue affects an unknown part of the fil...
Unsecured Database Leaks 153 GB of Filipino Student and Family Data
By Deeba Ahmed Personal Information of 200,000+ Exposed in Philippine School Voucher Program Portal Data Leak. This is a post from HackRead.com Read the original post: Unsecured Database Leaks 153 GB of Filipino Student and Family Data...
Tutor LMS < 2.6.1 - Student+ HTML Injection via Q&A
Description The plugin is vulnerable to HTML Injection due to insufficient sanitization of HTML input in the Q functionality, allowing authenticated attackers, with Student access and above, to inject arbitrary HTML onto a site, though it does not allow Cross-Site Scripting...
WordPress Tutor LMS Plugin <= 2.6.0 is vulnerable to Content Injection
Software Tutor LMS Type Plugin Vulnerable versions = 2.6.0 Fixed in 2.6.1 OWASP Top 10 A3: Injection Classification Content Injection CVE CVE-2024-1128 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 4f8a158bf40f Credits drop Required privilege Student Published 21 Februar...
CVE-2024-1128 Tutor LMS <= 2.6.0 - Authenticated(Student+) HTML Injection via Q&A
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2.6.0. This is due to insufficient sanitization of HTML input in the Q&A functionality. This makes it possible for authenticated attackers, with Student...
