Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function saveattendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to th...

CVE-2023-6771

CVE-2023-6771 affects SourceCodester Simple Student Attendance System 1.0 in the actions.class.php, save_attendance function. The sid parameter is vulnerable to SQL injection, enabling an attacker to manipulate queries. Public exploitation information exists. Affected component: save_attendance (...

CVE-2023-6771 SourceCodester Simple Student Attendance System actions.class.php save_attendance sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function saveattendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to th...

CVE-2023-6771: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function saveattendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to th...

CVE-2020-26165: Deserialization of Untrusted Data

qdPM through 9.1 allows PHP Object Injection via timeReportActions::executeExport in core/apps/qdPM/modules/timeReport/actions/actions.class.php because unserialize is used...