Lucene search
+L

4544 matches found

OSV
OSV
added 2025/12/30 1:15 a.m.8 views

CVE-2025-15213

A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument storeid leads to improper authorization. The attack is possible to be...

4.3CVSS5.5AI score0.00284EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/30 1:15 a.m.13 views

CVE-2025-15213

A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument storeid leads to improper authorization. The attack is possible to be...

5.3CVSS0.00284EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/12/30 1:2 a.m.18 views

EUVD-2025-205679

A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument storeid leads to improper authorization. The attack is possible to be...

5.3CVSS6.3AI score0.00284EPSS
SaveExploits1References6
CVE
CVE
added 2025/12/30 1:2 a.m.37 views

CVE-2025-15213

The CVE concerns code-projects Student File Management System 1.0, specifically the File Download Handler’s file /download.php. The vulnerability stems from improper authorization caused by manipulating the store_id argument, enabling remote exploitation. Documentation consistently notes that the...

5.3CVSS6.5AI score0.00284EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.9 views

PT-2025-53831

Name of the Vulnerable Software and Affected Versions code-projects Student File Management System version 1.0 Description An improper authorization issue exists in the File Download Handler component of code-projects Student File Management System version 1.0. The issue is due to the manipulatio...

5.3CVSS6.2AI score0.00284EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.12 views

Code-Projects Student File Management System 授权问题漏洞

Code-Projects Student File Management System is an open source student file management system from Code-Projects. An authorization issue vulnerability exists in Code-Projects Student File Management System version 1.0, which stems from incorrect manipulation of the storeid parameter in...

5.3CVSS4.8AI score0.00284EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/29 9:15 p.m.7 views

CVE-2025-15205

A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download.php. The manipulation of the argument istoreid leads to sql injection. The attack can be initiated remotely. The exploit is publicly...

8.8CVSS5.8AI score0.00307EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/29 9:15 p.m.8 views

CVE-2025-15205

A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download.php. The manipulation of the argument istoreid leads to sql injection. The attack can be initiated remotely. The exploit is publicly...

8.8CVSS0.00307EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/29 9:2 p.m.22 views

CVE-2025-15205

CVE-2025-15205 affects code-projects’ Student File Management System 1.0. The vulnerability is a SQL injection in the file /download.php triggered by manipulating the istore_id parameter, allowing remote exploitation and potentially exposing or tampering with database information. Public exploit ...

8.8CVSS6.5AI score0.00307EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/29 9:2 p.m.5 views

CVE-2025-15205 code-projects Student File Management System download.php sql injection

A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download.php. The manipulation of the argument istoreid leads to sql injection. The attack can be initiated remotely. The exploit is publicly...

6.5CVSS6.8AI score0.00307EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/29 9:2 p.m.34 views

CVE-2025-15205 code-projects Student File Management System download.php sql injection

A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download.php. The manipulation of the argument istoreid leads to sql injection. The attack can be initiated remotely. The exploit is publicly...

6.5CVSS0.00307EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/29 3:15 a.m.8 views

CVE-2025-15168

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

9.8CVSS5.8AI score0.00335EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/29 3:15 a.m.14 views

CVE-2025-15168

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

9.8CVSS0.00335EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/12/29 2:32 a.m.5 views

CVE-2025-15168 itsourcecode Student Management System statistical.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

7.5CVSS6.8AI score0.00335EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/29 2:32 a.m.54 views

CVE-2025-15168

The CVE-2025-15168 entry concerns itsourcecode Student Management System (SMS) 1.0. Affected is the function handling the ID parameter in /statistical.php, where manipulating ID enables an SQL injection. The issue allows remote exploitation and is corroborated by multiple sources noting a publicl...

9.8CVSS6.8AI score0.00335EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2025/12/29 2:32 a.m.11 views

EUVD-2025-205543

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

7.5CVSS6.6AI score0.00335EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/12/29 2:32 a.m.45 views

CVE-2025-15168 itsourcecode Student Management System statistical.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

7.5CVSS0.00335EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.8 views

itsourcecode Student Management System 安全漏洞

itsourcecode Student Management System is an open source student management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from an incorrect manipulation of the parameter ID in the file /statistical.php, which may le...

9.8CVSS7.1AI score0.00335EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.14 views

PT-2025-53685

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A SQL injection issue exists in itsourcecode Student Management System 1.0. Manipulation of the ID argument in the /statistical.php file can lead to SQL injection. The attack can b...

7.5CVSS7.6AI score0.00335EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.8 views

PT-2025-53793

Name of the Vulnerable Software and Affected Versions code-projects Student File Management System version 1.0 Description A flaw exists in Student File Management System version 1.0 that allows for remote code execution. The issue is related to SQL injection within the /download.php file,...

8.8CVSS8.3AI score0.00307EPSS
SaveExploits1References10
Rows per page
Query Builder