Lucene search
+L

2329 matches found

CNNVD
CNNVD
•added 2023/12/10 12:00 a.m.•15 views

Teacher Subject Allocation Management System Cross-Site Scripting Vulnerability

Teacher Subject Allocation Management System is a Teacher Subject Allocation Management System. A cross-site scripting vulnerability exists in PHPGurukul Teacher Subject Allocation Management System version 1.0, which stems from a cross-site scripting XSS vulnerability in the file index.php...

6.1CVSS5.8AI score0.00751EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/12/10 12:00 a.m.•17 views

PT-2023-32725 · Unknown · Phpgurukul Teacher Subject Allocation Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Teacher Subject Allocation Management System version 1.0 Description: A vulnerability has been found in the PHPGurukul Teacher Subject Allocation Management System, classified as problematic. This issue affects unknown code of the...

6.1CVSS6.4AI score0.00751EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/10 12:00 a.m.•4 views

CVE-2023-6653: Cross-Site Request Forgery (CSRF)

A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/subject.php of the component Create a new Subject. The manipulation of the argument cid leads to...

5CVSS5AI score0.00399EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/12/10 12:00 a.m.•13 views

Teacher Subject Allocation Management System Security Vulnerability

Teacher Subject Allocation Management System is a teacher subject allocation management system. A security vulnerability exists in Teacher Subject Allocation Management System version 1.0, which originates from a cross-site request forgery CSRF vulnerability in the file /admin/subject.php...

5CVSS6.8AI score0.00399EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/10 12:00 a.m.•2 views

CVE-2023-6649: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file index.php. The manipulation of the argument searchdata with the input leads to cross site scripting. The attack can be...

6.1CVSS3.7AI score0.00751EPSS
SaveExploits1References2
OSV
OSV
•added 2023/11/16 2:33 p.m.•95 views

GHSA-82VR-5769-6358 Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification

Impact The Fides Privacy Center allows data subject users to submit privacy and consent requests to data controller users of the Fides web application. Privacy requests allow data subjects to submit a request to access all person data held by the data controller, or delete/erase it. Consent reque...

8.2CVSS8.8AI score0.00992EPSS
SaveExploits0References5
CNVD
CNVD
•added 2023/11/16 12:00 a.m.•14 views

Teacher Subject Allocation Management System teacher-info.php File SQL Injection Vulnerability

Teacher Subject Allocation Management System a teacher subject allocation management system. The Teacher Subject Allocation Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the editid parameter of...

4.9CVSS8.3AI score0.00654EPSS
SaveExploits1References1
CVE
CVE
•added 2023/11/15 8:53 p.m.•102 views

CVE-2023-48224

CVE-2023-48224 affects Fides (Privacy Center) where one-time verification codes are generated using Python’s weak random module. The root cause is a cryptographically weak pseudo-random number generator, allowing an attacker who observes several hundred codes to predict future codes within the ba...

9.1CVSS7.8AI score0.00992EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/11/15 12:00 a.m.•17 views

PT-2023-30741

Name of the Vulnerable Software and Affected Versions Fides versions prior to 2.24.0 Description The Fides Privacy Center allows data subject users to submit privacy and consent requests to data controller users of the Fides web application. If subject identity verification required is set to Tru...

9.1CVSS7.2AI score0.00992EPSS
SaveExploits0References12
OSV
OSV
•added 2023/11/14 10:15 p.m.•17 views

CVE-2023-46026

Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...

4.8CVSS6AI score0.00423EPSS
SaveExploits1References1
NVD
NVD
•added 2023/11/14 10:15 p.m.•41 views

CVE-2023-46024

SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter...

7.5CVSS0.01079EPSS
SaveExploits4References1
OSV
OSV
•added 2023/11/14 10:15 p.m.•18 views

CVE-2023-46024

SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter...

7.5CVSS6AI score0.01079EPSS
SaveExploits4References1
OSV
OSV
•added 2023/11/14 10:15 p.m.•13 views

CVE-2023-46025

SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter...

4.9CVSS5.8AI score0.00654EPSS
SaveExploits1References1
NVD
NVD
•added 2023/11/14 10:15 p.m.•28 views

CVE-2023-46025

SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter...

4.9CVSS0.00654EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/11/14 10:15 p.m.•9 views

CVE-2023-46024

SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter...

7.5CVSS6.1AI score0.01079EPSS
SaveExploits4References2
Prion
Prion
•added 2023/11/14 10:15 p.m.•17 views

Sql injection

SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter...

5CVSS8.1AI score0.01079EPSS
SaveExploits4References1Affected Software1
Prion
Prion
•added 2023/11/14 10:15 p.m.•22 views

Cross site scripting

Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...

4.3CVSS6.5AI score0.00423EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•2 views

CVE-2023-46026: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...

4.8CVSS5.9AI score0.00423EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•18 views

phpgurukul Teacher Subject Allocation Management System 安全漏洞

Teacher Subject Allocation Management System a teacher subject allocation management system. The Teacher Subject Allocation Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the searchdata parameter of...

7.5CVSS8.2AI score0.01079EPSS
SaveExploits4References3
Vulnrichment
Vulnrichment
•added 2023/11/14 12:00 a.m.•10 views

CVE-2023-46024

SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter...

7.8AI score0.01079EPSS
SaveExploits4References1
Rows per page
Query Builder