Lucene search
+L

4531 matches found

Cvelist
Cvelist
added 2022/08/28 10:46 p.m.29 views

CVE-2022-36708

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /student/bookdetails.php...

10AI score0.00891EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/08/28 12:0 a.m.6 views

PT-2022-4460 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Id parameter at the "/student/bookdetails.php" API endpoint. It allows a remote attacker to...

9.8CVSS9.7AI score0.00891EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2022/08/27 12:0 a.m.8 views

PT-2022-20017 · Sourcecodester · Sourcecodester Simple Task Managing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Task Managing System affected versions not specified Description: A problematic vulnerability was found in the SourceCodester Simple Task Managing System, affecting unknown code. The manipulation of the student add...

6.1CVSS5.9AI score0.0049EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/08/27 12:0 a.m.7 views

Simple Task Managing System 跨站脚本漏洞

Simple Task Managing System is a simple task management system. Simple Task Managing System suffers from a cross-site scripting vulnerability that stems from its unknown code manipulation of the parameter studentadd resulting in cross-site scripting. The attack method can be initiated remotely an...

6.1CVSS5.9AI score0.0049EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/08/26 1:15 p.m.3 views

CVE-2022-36682

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletestudent...

9.8CVSS7.4AI score0.00891EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/26 1:15 p.m.6 views

CVE-2022-36682

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletestudent...

9.8CVSS5.8AI score0.00891EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/08/26 12:50 p.m.26 views

CVE-2022-36682

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletestudent...

10AI score0.00891EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/08/26 12:0 a.m.7 views

Simple Task Scheduling System SQL注入漏洞

Simple Task Scheduling System is a simple task scheduling system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Task Scheduling System v1.0, which stems from a security issue with the id parameter in /classes/Master.php?f=deletestudent...

9.8CVSS7.8AI score0.00891EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/08/26 12:0 a.m.27 views

PT-2022-23551 · Unknown · Simple Task Scheduling System

Name of the Vulnerable Software and Affected Versions: Simple Task Scheduling System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete student" endpoint. Recommendations: Fo...

9.8CVSS9.4AI score0.00891EPSS
SaveExploits1References4
Wired Threat Level
Wired Threat Level
added 2022/08/25 1:0 p.m.18 views

Scans of Students’ Homes During Tests Are Deemed Unconstitutional

An Ohio judge ruled that such surveillance to prevent cheating could form a slippery slope to more illegal searches...

0.9AI score
SaveExploits0
OSV
OSV
added 2022/08/22 3:15 p.m.4 views

CVE-2022-2312

The Student Result or Employee Database WordPress plugin before 1.7.5 does not have CSRF in its AJAX actions, allowing attackers to make logged in user with a role as low as contributor to add/edit and delete students via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it...

5.4CVSS5.8AI score0.00254EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/08/22 3:15 p.m.2 views

CVE-2022-2312

The Student Result or Employee Database WordPress plugin before 1.7.5 does not have CSRF in its AJAX actions, allowing attackers to make logged in user with a role as low as contributor to add/edit and delete students via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it...

5.4CVSS5.9AI score0.00254EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/08/22 12:0 a.m.5 views

WordPress plugin Student Result or Employee Database 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.4CVSS5.7AI score0.00254EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2022/08/22 12:0 a.m.4 views

PT-2022-15863 · WordPress · Student Result/Employee Database Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Student Result or Employee Database WordPress plugin versions prior to 1.7.5 Description: The issue allows attackers to make logged-in users with a role as low as contributor to add, edit, and delete students via CSRF attacks due to the lack ...

5.4CVSS5.2AI score0.00254EPSS
SaveExploits2References5
ATTACKERKB
ATTACKERKB
added 2022/08/18 8:15 p.m.2 views

CVE-2022-36725

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /student/dele.php...

9.8CVSS7.4AI score0.00926EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/18 8:15 p.m.7 views

CVE-2022-36725

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /student/dele.php...

9.8CVSS5.8AI score0.00926EPSS
SaveExploits1References1
NVD
NVD
added 2022/08/18 8:15 a.m.43 views

CVE-2022-2876

A vulnerability, which was classified as critical, was found in SourceCodester Student Management System. Affected is an unknown function of the file index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

9.8CVSS0.00648EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/18 8:15 a.m.18 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Student Management System. Affected is an unknown function of the file index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

7.5CVSS9.7AI score0.00648EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/08/18 7:30 a.m.28 views

CVE-2022-2876 SourceCodester Student Management System index.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Student Management System. Affected is an unknown function of the file index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

6.3CVSS10AI score0.00648EPSS
SaveExploits1References2
CVE
CVE
added 2022/08/18 7:30 a.m.60 views

CVE-2022-2876

The CVE-2022-2876 entry concerns SourceCodester Student Management System, where an SQL injection is possible via manipulating the id parameter in index.php. The vulnerability is exploitable remotely and was disclosed publicly; affected is an unknown function in index.php. Connected sources corro...

9.8CVSS8.3AI score0.00648EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder