Lucene search
+L

4544 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:18 a.m.25 views

CVE-2025-1902

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability affects unknown code of the file /password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS7.7AI score0.00583EPSS
SaveExploits1References1
NVD
NVD
added 2026/01/02 10:15 a.m.9 views

CVE-2026-0547

A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload. The attack may be...

8.8CVSS0.00315EPSS
SaveExploits1References5
OSV
OSV
added 2026/01/02 10:15 a.m.8 views

CVE-2026-0547

A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload. The attack may be...

8.8CVSS5.4AI score0.00315EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/01/02 9:35 a.m.15 views

CVE-2026-0544

A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public an...

9.8CVSS7.4AI score0.00339EPSS
SaveExploits1References1
CVE
CVE
added 2026/01/02 9:32 a.m.19 views

CVE-2026-0547

PHPGurukul Online Course Registration up to v3.1 contains a vulnerability in the admin/edit-student-profile.php component where manipulating the photo parameter allows unrestricted file uploads. The issue is exploitable remotely and exploits have been made public, enabling arbitrary files to be u...

8.8CVSS6.3AI score0.00315EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/02 9:32 a.m.5 views

CVE-2026-0547 PHPGurukul Online Course Registration Student Registration edit-student-profile.php unrestricted upload

A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload. The attack may be...

6.5CVSS6.6AI score0.00315EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/02 9:32 a.m.44 views

CVE-2026-0547 PHPGurukul Online Course Registration Student Registration edit-student-profile.php unrestricted upload

A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing of the file /admin/edit-student-profile.php of the component Student Registration Page. The manipulation of the argument photo results in unrestricted upload. The attack may be...

6.5CVSS0.00315EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.7 views

PHPGurukul Online Course Registration 代码问题漏洞

PHPGurukul Online Course Registration is an online course registration system from PHPGurukul, Inc. A code issue vulnerability exists in PHPGurukul Online Course Registration 3.1 and earlier versions, which stems from incorrect manipulation of the parameter photo in the component student...

8.8CVSS6.4AI score0.00315EPSS
SaveExploits1References6
NVD
NVD
added 2026/01/01 9:15 a.m.9 views

CVE-2026-0544

A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public an...

9.8CVSS0.00339EPSS
SaveExploits1References5
OSV
OSV
added 2026/01/01 9:15 a.m.8 views

CVE-2026-0544

A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public an...

9.8CVSS5.7AI score0.00339EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/01 9:2 a.m.7 views

CVE-2026-0544 itsourcecode School Management System index.php sql injection

A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public an...

7.5CVSS6.7AI score0.00339EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/01/01 9:2 a.m.8 views

EUVD-2026-0002

A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public an...

7.5CVSS6.5AI score0.00339EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2026/01/01 9:2 a.m.35 views

CVE-2026-0544 itsourcecode School Management System index.php sql injection

A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public an...

7.5CVSS0.00339EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/01 9:2 a.m.25 views

CVE-2026-0544

The CVE-2026-0544 reports a SQL injection in itsourcecode School Management System 1.0, triggered by manipulating the ID parameter in /student/index.php. This allows remote exploitation and, per connected sources, exploits have been publicly released. The root cause is improper handling/validatio...

9.8CVSS7.3AI score0.00339EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.10 views

PT-2026-1003

Name of the Vulnerable Software and Affected Versions itsourcecode School Management System version 1.0 Description A security flaw exists in itsourcecode School Management System 1.0. The issue affects an unknown part of the file /student/index.php. Manipulation of the ID argument can lead to SQ...

9.8CVSS7AI score0.00339EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2026/01/01 12:0 a.m.10 views

itsourcecode School Management System 安全漏洞

itsourcecode School Management System is an open source school management system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode School Management System, which stems from an incorrect manipulation of the parameter ID in the file /student/index.php, which could lea...

9.8CVSS7.7AI score0.00339EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/12/31 1:4 a.m.14 views

CVE-2025-15213

A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument storeid leads to improper authorization. The attack is possible to be...

5.3CVSS6.6AI score0.00284EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/12/31 12:0 a.m.9 views

Student File Management System download.php File SQL Injection Vulnerability

Student File Management System is a student file management system. A SQL injection vulnerability exists in Student File Management System due to mishandling of the istoreid parameter by an unknown function module in the /download.php file. An attacker can use this vulnerability to obtain or tamp...

8.8CVSS6.8AI score0.00307EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/30 9:9 p.m.16 views

CVE-2025-15205

A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download.php. The manipulation of the argument istoreid leads to sql injection. The attack can be initiated remotely. The exploit is publicly...

8.8CVSS7.2AI score0.00307EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/30 3:1 a.m.14 views

CVE-2025-15168

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

7.5CVSS7.1AI score0.00335EPSS
SaveExploits1References1
Rows per page
Query Builder