CVE-2025-50586

The StudentManage student management system by DayCloud (version 1.0 ) is vulnerable to Cross-Site Request Forgery (CSRF) . This vulnerability allows an attacker to perform unauthorized actions on behalf of a logged-in user. While the issue has been documented, there is currently no information r...

StudentManage 安全漏洞

StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from vulnerability to cross-site request forgery attacks...

CVE-2025-50585: Improper Neutralization of Special Elements used in an SQL Command

StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl...

CVE-2025-50584: Improper Neutralization of Input During Web Page Generation

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Teacher module...

CVE-2025-50583: Improper Neutralization of Input During Web Page Generation

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Student module...

CVE-2025-50583

The student management system StudentManage v1.0 , developed by DayCloud Individual Developer, contains a cross-site scripting (XSS) vulnerability. The root cause is the mishandling of input within the Add A New Student module , which may allow an attacker to execute malicious scripts. Remediatio...

CVE-2025-50583

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Student module...

PT-2025-30091 · Unknown · Student-Manage

Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS issue via the Add A New Teacher module. Recommendations: Address the issue in the Add A New Teacher module in StudentManage version 1.0...

PT-2025-30096 · Unknown · Student-Manage

Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS vulnerability within the Add A New Course module. Recommendations: Address the issue in the Add A New Course module for StudentManage version 1.0...

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

CVE-2025-50582

StudentManage v1.0 contains a cross-site scripting (XSS) vulnerability located within the Add A New Course module. The root cause is the improper neutralization of input during web page generation, which could allow an attacker to execute malicious scripts in a user's browser. The documents recom...

CVE-2025-50584

The StudentManage student management system (version 1.0 ) contains a cross-site scripting (XSS) vulnerability within the Add A New Teacher module. This flaw stems from the mishandling of input during web page generation, which could allow an attacker to execute malicious scripts in a victim's br...

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

CVE-2025-50584

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Teacher module...

StudentManage 安全漏洞

StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from improper handling of the component /admin/adminStudentUrl, which could lead to an SQL injection attack...

PT-2025-30083 · Unknown · Student-Manage

Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: StudentManage version 1.0 contains a SQL injection vulnerability via the /admin/adminStudentUrl component. Recommendations: At the moment, there is no information about a newer version that contains a fi...

CVE-2025-50585

StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl...

StudentManage 安全漏洞

StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Teacher module and could lead to a cross-site scripting attack...

CVE-2025-50585

StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl...

CVE-2025-50585

The StudentManage student management system (version 1.0 ) is vulnerable to a SQL injection vulnerability. This flaw exists within the /admin/adminStudentUrl component due to improper neutralization of special elements used in SQL commands. An attacker could potentially exploit this to interact w...