9 matches found
PT-2026-94376
Name of the Vulnerable Software and Affected Versions RosarioSIS versions prior to 12.9 Description Authenticated users can delete allow-listed files through a path traversal flaw in the Users and Students modules. By using parent-directory sequences in the filename request parameter, an attacker...
CVE-2026-93014: Improper Limitation of a Pathname to a Restricted Directory
RosarioSIS versions before 12.9 fail to validate the filename request parameter in Users and Students modules, allowing authenticated users to unlink allow-listed files via path traversal. Attackers can use parent-directory sequences to escape upload directories and delete CSS, XML, JSON resource...
EUVD-2025-9652
Malicious code in bioql PyPI...
CVE-2025-6475
A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/managestudents of the component Manage Students Module. The manipulation leads to cross site scripting. The attack m...
CVE-2025-6475 SourceCodester Student Result Management System Manage Students Module manage_students cross site scripting
A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/managestudents of the component Manage Students Module. The manipulation leads to cross site scripting. The attack m...
CVE-2025-6475
CVE-2025-6475 affects SourceCodester Student Result Management System 1.0, specifically the Manage Students Module and the file path /script/admin/manage_students. The vulnerability is a cross-site scripting flaw arising from handling input in that file, exploitable remotely with public disclosur...
CVE-2025-6475 SourceCodester Student Result Management System Manage Students Module manage_students cross site scripting
A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/managestudents of the component Manage Students Module. The manipulation leads to cross site scripting. The attack m...
CVE-2025-6475: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/managestudents of the component Manage Students Module. The manipulation leads to cross site scripting. The attack m...