50 matches found
CVE-2025-50584
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Teacher module...
PT-2025-30097 · Unknown · Student-Manage
Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS issue within the Add A New Student module. Recommendations: Address the issue in the Add A New Student module...
StudentManage 安全漏洞
StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from vulnerability to cross-site request forgery attacks...
CVE-2025-50585
StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl...
PT-2025-30096 · Unknown · Student-Manage
Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS vulnerability within the Add A New Course module. Recommendations: Address the issue in the Add A New Course module for StudentManage version 1.0...
PT-2025-30069 · Unknown · Student-Manage
Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a Cross-Site Request Forgery CSRF issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2025-50586
StudentManage v1.0 was discovered to contain Cross-Site Request Forgery CSRF...
StudentManage 安全漏洞
StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Teacher module and could lead to a cross-site scripting attack...
StudentManage 安全漏洞
StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from improper handling of the component /admin/adminStudentUrl, which could lead to an SQL injection attack...
CVE-2025-50585
StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl...
CVE-2025-50582
Affected software: StudentManage v1.0.Vulnerability: Cross-site scripting (XSS) via the Add A New Course module in the StudentManage application.Root cause: The provided documents indicate an XSS flaw in the Add A New Course module but do not detail the exact code path or input handling mechanism...
PT-2025-30083 · Unknown · Student-Manage
Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: StudentManage version 1.0 contains a SQL injection vulnerability via the /admin/adminStudentUrl component. Recommendations: At the moment, there is no information about a newer version that contains a fi...
PT-2025-30091 · Unknown · Student-Manage
Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS issue via the Add A New Teacher module. Recommendations: Address the issue in the Add A New Teacher module in StudentManage version 1.0...
CVE-2025-50583
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Student module...
CVE-2025-50583
CVE-2025-50583 concerns a cross-site scripting (XSS) vulnerability in StudentManage v1.0, arising from the Add A New Student module. The available documents indicate the affected software is a student management system, with the root cause described as mishandling user input in that module, enabl...
CVE-2025-50584
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Teacher module...
CVE-2025-50584
Product affected: StudentManage v1.0. The issue is a cross-site scripting (XSS) vulnerability in the Add A New Teacher module. Root cause details are not provided beyond the XSS finding. Impact, scope, and exploitability are described in general terms (XSS may affect user input handling); explici...
CVE-2025-50582
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...
CVE-2025-50582
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...
CVE-2025-50586
CVE-2025-50586 affects StudentManage v1.0 and is described in connected sources as a Cross-Site Request Forgery (CSRF) vulnerability. The base metrics indicate CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N with a base score of 6.5 (Medium). No exploitation details are provided in the sources, and...