CVE-2022-46503

The CVE-2022-46503 entry relates to a cross-site scripting (XSS) vulnerability in Online Student Enrollment System v1.0, affecting the /admin/register.php component where an attacker can inject a payload via the name parameter. The issue is confirmed across multiple records; the core details spec...

PT-2023-15171 · Unknown · Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: Student Study Center Management System version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. This enables the execution of...

CVE-2022-47102

A cross-site scripting XSS vulnerability in Student Study Center Management System V 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

Student Study Center Management System 跨站脚本漏洞

Student Study Center Management System is a student study center management system from the individual developer ANUJ KUMAR. A cross-site scripting vulnerability exists in Student Study Center Management System version V 1.0, which originates from a well-designed payload that allows an attacker t...

CVE-2022-46503

A cross-site scripting XSS vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter...

CVE-2022-46503

A cross-site scripting XSS vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter...

Online Student Enrollment System 跨站脚本漏洞

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy Individual Developer. A security vulnerability exists in Online Student Enrollment System version v1.0, which stems from a cross-site scripting XSS vulnerability in the component /admin /register.php that...

CVE-2022-47102

A cross-site scripting XSS vulnerability in Student Study Center Management System V 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

CVE-2022-47102

CVE-2022-47102 describes a cross-site scripting (XSS) vulnerability in the Student Study Center Management System v1.0. An attacker can inject a crafted payload into the name parameter to execute arbitrary web scripts or HTML in the victim’s browser. The issue is documented with a CVSS v3.1 base ...

@cloud-carbon-footprint/client (>=0.0.0 <=0.2.0), @financial-times/ed-tech-auth (>=1.1.0 <=1.7.0) +5 more potentially affected by CVE-2022-3145 via @okta/oidc-middleware (>=0.0.2 <=4.5.1)

@okta/oidc-middleware NPM version =0.0.2, =0.0.0, =1.1.0, =0.0.1, =1.78.0, =0.1.0, =0.3.1 Source cves: CVE-2022-3145 Source advisory: OSV:GHSA-58H4-9M7M-J9M4...

studentportal.mku.ac.ke Cross Site Scripting vulnerability OBB-3106881

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-2807

CVE-2022-2807 concerns SQL Injection in the Algan Software Prens Student Information System (SIS). The vulnerability affects versions prior to 2.1.11. The issue enables unauthorized access to database information via injection flaws in the SIS surface (per PT-2022-18792). Remediation is to upgrad...

CVE-2022-2807 SQL Injection in Prens Student Information System

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects Prens Student Information System: before 2.1.11...

CVE-2022-2807 SQL Injection in Prens Student Information System

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects Prens Student Information System: before 2.1.11...

CVE-2022-2808 IDOR in Prens Student Information System

Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. This issue affects Prens Student Information System: before 2.1.11...

CVE-2022-2808

CVE-2022-2808 affects the Algan Software Prens Student Information System prior to version 2.1.11. The connected PT-2022-18798 entry clarifies the issue as an Authorization Bypass Through User-Controlled Key vulnerability that enables Object-Relational Mapping Injection and is accompanied by an a...

CVE-2022-2807

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects Prens Student Information System: before 2.1.11...

CVE-2022-2808

Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. This issue affects Prens Student Information System: before 2.1.11...

CVE-2022-2807

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection.This issue affects Prens Student Information System: before 2.1.11...

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection.This issue affects Prens Student Information System: before 2.1.11...