Lucene search
+L

4532 matches found

NVD
NVD
added 2023/12/08 5:15 p.m.22 views

CVE-2023-6618

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The exploit has been disclosed to...

8.8CVSS0.00862EPSS
SaveExploits0References3
OSV
OSV
added 2023/12/08 5:15 p.m.3 views

CVE-2023-6618

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The exploit has been disclosed to...

8.8CVSS4.8AI score0.00862EPSS
SaveExploits0References3
Prion
Prion
added 2023/12/08 5:15 p.m.23 views

Sql injection

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as critical. Affected is an unknown function of the file attendance.php. The manipulation of the argument classid leads to sql injection. The exploit has been disclosed to the public and may b...

5.2CVSS7.7AI score0.00796EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2023/12/08 5:15 p.m.19 views

Design/Logic Flaw

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The exploit has been disclosed to...

5.2CVSS7.2AI score0.00862EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2023/12/08 5:0 p.m.49 views

CVE-2023-6618

CVE-2023-6618 affects SourceCodester Simple Student Attendance System 1.0. The vulnerability is a file Inclusion in the file index.php caused by improper handling of the page (argument) parameter. Publicly disclosed exploit implies potential arbitrary file inclusion. Affected functionality is uns...

8.8CVSS7.2AI score0.00862EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/12/08 5:0 p.m.31 views

CVE-2023-6618 SourceCodester Simple Student Attendance System index.php file inclusion

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The exploit has been disclosed to...

5.5CVSS8.9AI score0.00862EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/12/08 5:0 p.m.33 views

CVE-2023-6617 SourceCodester Simple Student Attendance System attendance.php sql injection

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as critical. Affected is an unknown function of the file attendance.php. The manipulation of the argument classid leads to sql injection. The exploit has been disclosed to the public and may b...

5.5CVSS10AI score0.00796EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/12/08 5:0 p.m.16 views

CVE-2023-6617 SourceCodester Simple Student Attendance System attendance.php sql injection

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as critical. Affected is an unknown function of the file attendance.php. The manipulation of the argument classid leads to sql injection. The exploit has been disclosed to the public and may b...

5.5CVSS7.6AI score0.00796EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/12/08 4:31 p.m.30 views

CVE-2023-6616 SourceCodester Simple Student Attendance System index.php cross site scripting

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack may be initiated remotely. The exploit...

4CVSS6.2AI score0.00608EPSS
SaveExploits1References3
CVE
CVE
added 2023/12/08 4:31 p.m.44 views

CVE-2023-6616

CVE-2023-6616 affects SourceCodester Simple Student Attendance System 1.0. The vulnerability resides in index.php where manipulating the page argument enables cross-site scripting. The issue can be exploited remotely; exploits have been disclosed. No fixed version is listed in the provided docume...

6.1CVSS4.8AI score0.00608EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/12/08 12:15 a.m.6 views

CVE-2023-5008

Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control...

9.8CVSS5.9AI score0.00883EPSS
SaveExploits1References2
Prion
Prion
added 2023/12/08 12:15 a.m.17 views

Sql injection

Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control...

7.5CVSS8.5AI score0.00883EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/08 12:0 a.m.9 views

PT-2023-32718 · Sourcecodester · Sourcecodester Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Attendance System version 1.0 Description: A vulnerability was found in the processing of the file index.php, where the manipulation of the page argument leads to cross-site scripting. The attack may be initiated...

6.1CVSS6.7AI score0.00608EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/12/08 12:0 a.m.9 views

SourceCodester Simple Student Attendance System SQL Injection Vulnerability

Simple Student Attendance System is a simple student attendance system. SourceCodester Simple Student Attendance System version 1.0 has a SQL injection vulnerability that originates from a SQL injection vulnerability in the file /modals/classform.php...

9.8CVSS6.5AI score0.00796EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2023/12/07 11:16 p.m.30 views

CVE-2023-5008 Student Information System v1.0 - Unauthenticated SQL Injection

Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control...

9.8CVSS10AI score0.00883EPSS
SaveExploits1References2
OSV
OSV
added 2023/12/07 11:15 p.m.4 views

CVE-2023-4122

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

8.8CVSS5.9AI score0.01501EPSS
SaveExploits1References2
NVD
NVD
added 2023/12/07 11:15 p.m.21 views

CVE-2023-4122

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

9.9CVSS0.01501EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/12/07 11:10 p.m.3 views

CVE-2023-4122 Student Information System v1.0 - Insecure File Upload

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

9.9CVSS7.2AI score0.01501EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/12/07 11:10 p.m.22 views

CVE-2023-4122 Student Information System v1.0 - Insecure File Upload

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

9.9CVSS9.7AI score0.01501EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/12/07 12:0 a.m.6 views

Student Information System Code Issue Vulnerability

Student Information System is a web-based application platform by Carlo Montero, a personal developer. It can help a university or college to manage student information and academic records. A code issue vulnerability exists in Student Information System v1.0 that stems from vulnerability to an...

9.9CVSS8.5AI score0.01501EPSS
SaveExploits1References4
Rows per page
Query Builder