Lucene search
+L

433 matches found

OSV
OSV
•added 2024/04/10 1:15 a.m.•16 views

CVE-2024-3529

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been classified as problematic. This affects an unknown part of the file studentsview.php. The manipulation of the argument FirstRecord leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS3.8AI score0.00641EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/04/10 12:00 a.m.•15 views

Student Management System 跨站脚本漏洞

Student Management System is a simple web-based student management software developed by Sk. Amir Hamza, an individual developer in Bangladesh. A cross-site scripting vulnerability exists in Complete Online Student Management System version 1.0, which originates from a cross-site scripting...

6.1CVSS4.5AI score0.00641EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/03/15 12:00 a.m.•19 views

Surya Developer Hostel Management Service Access Control Error Vulnerability

Surya Developer Hostel Management Service is an accommodation management service from Surya Developer India. An access control error vulnerability exists in Surya Developer Hostel Management Service version 1.0, which stems from an access control error vulnerability in the file...

6.5CVSS6.8AI score0.00953EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/03/14 12:00 a.m.•14 views

PT-2024-20578 · Unknown · Surya2Developer Hostel Management System

Name of the Vulnerable Software and Affected Versions: Surya2Developer Hostel Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /admin/manage-students.php. The manipulation of the del argument leads to improper access...

6.5CVSS6.8AI score0.00953EPSS
SaveExploits1References6
OSV
OSV
•added 2024/03/06 11:11 a.m.•48 views

BIT-MOODLE-2021-20184

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades...

4.3CVSS4.6AI score0.00719EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/06 11:03 a.m.•81 views

BIT-MOODLE-2022-40208

In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz attempt...

4.3CVSS4.7AI score0.00563EPSS
SaveExploits0References2
OSV
OSV
•added 2024/01/01 11:15 p.m.•17 views

CVE-2024-0183

A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/students.php of the component NIA Office. The manipulation leads to basic cross site scripting. It is possible to initiate the attack...

4.8CVSS3.8AI score0.0055EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/01/01 12:00 a.m.•18 views

PT-2024-15367 · Unknown · Rrj Nueva Ecija Engineer Online Portal

Name of the Vulnerable Software and Affected Versions: RRJ Nueva Ecija Engineer Online Portal version 1.0 Description: A vulnerability was found in the RRJ Nueva Ecija Engineer Online Portal, affecting an unknown part of the file /admin/students.php of the component NIA Office. The manipulation...

4.8CVSS3.7AI score0.0055EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2023/12/28 12:00 a.m.•13 views

PT-2023-30922 · Unknown · Student Result Management System

Name of the Vulnerable Software and Affected Versions: Student Result Management System version 1.0 Description: The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the roll no parameter of the "add students.php" resource does not validate the characters received, and...

8AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2023/12/21 8:57 p.m.•33 views

CVE-2023-48718 Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'classname' parameter of the addstudents.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.00671EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/21 12:00 a.m.•18 views

PT-2023-30921 · Unknown · Student Result Management System

Name of the Vulnerable Software and Affected Versions: Student Result Management System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The class name parameter of the "add students.php" resource does not validate the characters received, and th...

9.8CVSS10AI score0.00671EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/12/21 12:00 a.m.•15 views

Projectworlds Student Result Management System SQL Injection Vulnerability

Projectworlds Student Result Management System is a student result management system from Projectworlds India. Projectworlds Student Result Management System v1.0 suffers from a SQL injection vulnerability, which stems from the fact that the "classname" parameter of addstudents.php does not...

9.8CVSS7.9AI score0.00671EPSS
SaveExploits1References3
OSV
OSV
•added 2023/11/09 9:30 p.m.•30 views

GHSA-8MM2-M2GP-C6X2 Moodle Improper Access Control vulnerability

Students in "Only see own membership" groups could see other students in the group, which should be hidden...

4.3CVSS4.4AI score0.00433EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2023/11/09 8:15 p.m.•17 views

CVE-2023-5542

Students in "Only see own membership" groups could see other students in the group, which should be hidden...

4.3CVSS5.8AI score0.00433EPSS
SaveExploits0References4
NVD
NVD
•added 2023/11/09 8:15 p.m.•17 views

CVE-2023-5542

Students in "Only see own membership" groups could see other students in the group, which should be hidden...

4.3CVSS0.00433EPSS
SaveExploits0References3
OSV
OSV
•added 2023/11/09 7:27 p.m.•30 views

CVE-2023-5542 Moodle: students can view other users in "only see own membership" groups

Students in "Only see own membership" groups could see other students in the group, which should be hidden...

3.3CVSS5.9AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2023/11/09 7:27 p.m.•41 views

CVE-2023-5542 Moodle: students can view other users in "only see own membership" groups

Students in "Only see own membership" groups could see other students in the group, which should be hidden...

3.3CVSS6.9AI score0.00433EPSS
SaveExploits0References3
NVD
NVD
•added 2023/11/02 9:15 p.m.•25 views

CVE-2023-5929

A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/students/manageacademic.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public a...

7.5CVSS6.5AI score0.00562EPSS
SaveExploits1References3
Prion
Prion
•added 2023/11/02 9:15 p.m.•27 views

Sql injection

A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/students/manageacademic.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public a...

5.2CVSS7.8AI score0.00562EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/11/02 9:15 p.m.•37 views

Cross site scripting

A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/students/manageacademic.php. The manipulation of the argument studentid leads to cross site scripting. The attack can be...

4CVSS6.1AI score0.00505EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder