CVE-2025-3587

CVE-2025-3587 affects ZeroWdd/code-projects studentmanager version 1.0. The vulnerability involves improper authorization in the /getTeacherList file, allowing a remote attacker to exploit it. Public disclosures imply exploitable conditions. CVSS base impact ratings from sources include High conf...

CVE-2025-3587 ZeroWdd/code-projects studentmanager getTeacherList improper authorization

A vulnerability classified as critical was found in ZeroWdd/code-projects studentmanager 1.0. This vulnerability affects unknown code of the file /getTeacherList. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-3565

A vulnerability classified as critical was found in huanfenz/code-projects StudentManager 1.0. This vulnerability affects unknown code of the file /upload/uploadArticle.do of the component Announcement Management Section. The manipulation of the argument File leads to unrestricted upload. The...

CVE-2025-3564

A vulnerability classified as problematic has been found in huanfenz/code-projects StudentManager up to 1.0. This affects an unknown part of the component Teacher String Handler. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-3565

A vulnerability classified as critical was found in huanfenz/code-projects StudentManager 1.0. This vulnerability affects unknown code of the file /upload/uploadArticle.do of the component Announcement Management Section. The manipulation of the argument File leads to unrestricted upload. The...

CVE-2025-3565

CVE-2025-3565 affects huanfenz/code-projects StudentManager 1.0, specifically the /upload/uploadArticle.do path in the Announcement Management Section. The root cause is manipulation of the File parameter, enabling unrestricted file upload and remote exploitation. Public exploit information exist...

CVE-2025-3564

CVE-2025-3564 concerns huanfenz/code-projects StudentManager (up to 1.0), specifically the Teacher String Handler component. The issue is described as a vulnerability leading to improper authorization . The attack could be initiated remotely, and the exploit has been disclosed publicly. Multiple ...

CVE-2025-3564 huanfenz/code-projects StudentManager Teacher String improper authorization

A vulnerability classified as problematic has been found in huanfenz/code-projects StudentManager up to 1.0. This affects an unknown part of the component Teacher String Handler. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-3564 huanfenz/code-projects StudentManager Teacher String improper authorization

A vulnerability classified as problematic has been found in huanfenz/code-projects StudentManager up to 1.0. This affects an unknown part of the component Teacher String Handler. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been...

studentmanager 安全漏洞

studentmanager is a student management system by the individual developers of ZeroWdd. A security vulnerability exists in studentmanager version 1.0, which stems from improper authorization in the file /getTeacherList...

StudentManager 代码问题漏洞

StudentManager is a student management system developed by huanfenz. A code issue exists in StudentManager version 1.0, the vulnerability stems from improper manipulation of the parameter File in the file /upload/uploadArticle.do, which may result in arbitrary file uploads...

StudentManager 安全漏洞

StudentManager is a student management system by huanfenz individual developer. A security vulnerability exists in StudentManager 1.0 and earlier versions, which is caused by improper authorization...

PT-2025-16216 · Huanfenz/Code Projects · Studentmanager

Name of the Vulnerable Software and Affected Versions: huanfenz/code-projects StudentManager version 1.0 Description: A critical issue was found in the Announcement Management Section of the software, specifically affecting the /upload/uploadArticle.do file. The manipulation of the File argument...

CVE-2025-3587: Improper Authorization

A vulnerability classified as critical was found in ZeroWdd/code-projects studentmanager 1.0. This vulnerability affects unknown code of the file /getTeacherList. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-3565: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in huanfenz/code-projects StudentManager 1.0. This vulnerability affects unknown code of the file /upload/uploadArticle.do of the component Announcement Management Section. The manipulation of the argument File leads to unrestricted upload. The...

CVE-2025-3564: Improper Authorization

A vulnerability classified as problematic has been found in huanfenz/code-projects StudentManager up to 1.0. This affects an unknown part of the component Teacher String Handler. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been...

PT-2025-16215

Name of the Vulnerable Software and Affected Versions: huanfenz/code-projects StudentManager versions up to 1.0 Description: A problematic vulnerability has been found in the Teacher String Handler component, leading to improper authorization. The manipulation can be initiated remotely. The...

CVE-2024-13143

A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function submitAddPermission of the file src/main/java/com/zero/system/controller/PermissionController. java. The manipulation of the argument url leads to cross site scripting. The...

studentmanager 代码注入漏洞

studentmanager is a student management system by the individual developer ZeroWdd. A code injection vulnerability exists in studentmanager version 1.0, which stems from the parameter url of the file src/main/java/com/zero/system/controller/PermissionController.java that can lead to cross-site...

CVE-2024-13143: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function submitAddPermission of the file src/main/java/com/zero/system/controller/PermissionController. java. The manipulation of the argument url leads to cross site scripting. The...