CVE-2025-50585

CVE-2025-50585 affects StudentManage v1.0. A SQL injection in the /admin/adminStudentUrl component arises from improper input handling, enabling potentially unauthorized data access and manipulation. The vulnerability is rated with CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base score 8.8, HI...

CVE-2025-50583

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Student module...

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

CVE-2025-50586

CVE-2025-50586 affects StudentManage v1.0 and is described in connected sources as a Cross-Site Request Forgery (CSRF) vulnerability. The base metrics indicate CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N with a base score of 6.5 (Medium). No exploitation details are provided in the sources, and...

CVE-2025-2351

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351 DayCloud StudentManage Login Endpoint adminScoreUrl sql injection

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351

DayCloud StudentManage 1.0 is affected by an SQL injection in the login endpoint, specifically the /admin/adminScoreUrl file. The vulnerability results from unsafely handling an argument query, allowing remote exploitation without user interaction. No version details are provided for affected or ...

CVE-2025-2351 DayCloud StudentManage Login Endpoint adminScoreUrl sql injection

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

DayCloud StudentManage 注入漏洞

DayCloud StudentManage is a student management system for DayCloud individual developers. An injection vulnerability exists in DayCloud StudentManage version 1.0, which stems from SQL injection and could lead to a remote attack...