433 matches found
CVE-2024-3529
A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been classified as problematic. This affects an unknown part of the file studentsview.php. The manipulation of the argument FirstRecord leads to cross site scripting. It is possible to initiate the attack...
Student Management System 跨站脚本漏洞
Student Management System is a simple web-based student management software developed by Sk. Amir Hamza, an individual developer in Bangladesh. A cross-site scripting vulnerability exists in Complete Online Student Management System version 1.0, which originates from a cross-site scripting...
Surya Developer Hostel Management Service Access Control Error Vulnerability
Surya Developer Hostel Management Service is an accommodation management service from Surya Developer India. An access control error vulnerability exists in Surya Developer Hostel Management Service version 1.0, which stems from an access control error vulnerability in the file...
PT-2024-20578 · Unknown · Surya2Developer Hostel Management System
Name of the Vulnerable Software and Affected Versions: Surya2Developer Hostel Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /admin/manage-students.php. The manipulation of the del argument leads to improper access...
BIT-MOODLE-2021-20184
It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades...
BIT-MOODLE-2022-40208
In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz attempt...
CVE-2024-0183
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/students.php of the component NIA Office. The manipulation leads to basic cross site scripting. It is possible to initiate the attack...
PT-2024-15367 · Unknown · Rrj Nueva Ecija Engineer Online Portal
Name of the Vulnerable Software and Affected Versions: RRJ Nueva Ecija Engineer Online Portal version 1.0 Description: A vulnerability was found in the RRJ Nueva Ecija Engineer Online Portal, affecting an unknown part of the file /admin/students.php of the component NIA Office. The manipulation...
PT-2023-30922 · Unknown · Student Result Management System
Name of the Vulnerable Software and Affected Versions: Student Result Management System version 1.0 Description: The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the roll no parameter of the "add students.php" resource does not validate the characters received, and...
CVE-2023-48718 Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'classname' parameter of the addstudents.php resource does not validate the characters received and they are sent unfiltered to the database...
PT-2023-30921 · Unknown · Student Result Management System
Name of the Vulnerable Software and Affected Versions: Student Result Management System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The class name parameter of the "add students.php" resource does not validate the characters received, and th...
Projectworlds Student Result Management System SQL Injection Vulnerability
Projectworlds Student Result Management System is a student result management system from Projectworlds India. Projectworlds Student Result Management System v1.0 suffers from a SQL injection vulnerability, which stems from the fact that the "classname" parameter of addstudents.php does not...
GHSA-8MM2-M2GP-C6X2 Moodle Improper Access Control vulnerability
Students in "Only see own membership" groups could see other students in the group, which should be hidden...
CVE-2023-5542
Students in "Only see own membership" groups could see other students in the group, which should be hidden...
CVE-2023-5542
Students in "Only see own membership" groups could see other students in the group, which should be hidden...
CVE-2023-5542 Moodle: students can view other users in "only see own membership" groups
Students in "Only see own membership" groups could see other students in the group, which should be hidden...
CVE-2023-5542 Moodle: students can view other users in "only see own membership" groups
Students in "Only see own membership" groups could see other students in the group, which should be hidden...
CVE-2023-5929
A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/students/manageacademic.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public a...
Sql injection
A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/students/manageacademic.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public a...
Cross site scripting
A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/students/manageacademic.php. The manipulation of the argument studentid leads to cross site scripting. The attack can be...