StudentManage 安全漏洞

StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Student module, and may lead to cross-site scripting attacks...

CVE-2025-50585

The StudentManage student management system (version 1.0 ) is vulnerable to a SQL injection attack. This security flaw exists within the /admin/adminStudentUrl component due to improper handling of input. An attacker could potentially exploit this to perform unauthorized database queries or manip...

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

CVE-2025-50583

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Student module...

CVE-2025-2351

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351 DayCloud StudentManage Login Endpoint adminScoreUrl sql injection

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351

DayCloud StudentManage 1.0 is affected by an SQL injection in the login endpoint, specifically the /admin/adminScoreUrl file. The vulnerability results from unsafely handling an argument query, allowing remote exploitation without user interaction. No version details are provided for affected or ...

CVE-2025-2351 DayCloud StudentManage Login Endpoint adminScoreUrl sql injection

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

DayCloud StudentManage 注入漏洞

DayCloud StudentManage is a student management system for DayCloud individual developers. An injection vulnerability exists in DayCloud StudentManage version 1.0, which stems from SQL injection and could lead to a remote attack...