Lucene search
+L

27 matches found

CNVD
CNVD
•added 2025/11/18 12:00 a.m.•19 views

Student Record System add-course.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the course-short, course-full, and cdate parameters in add-course.php. An attacker can exploit this...

6.5CVSS6.2AI score0.00258EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/15 12:47 a.m.•33 views

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/11/14 4:15 p.m.•17 views

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References2
NVD
NVD
•added 2025/11/14 4:15 p.m.•19 views

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

6.5CVSS0.00258EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/11/14 12:00 a.m.•32 views

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

0.00258EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/14 12:00 a.m.•9 views

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

5.9AI score0.00258EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/14 12:00 a.m.•19 views

PHPGurukul Student Record System security vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the course-short, course-full, and cdate parameters in add-course.php. An attacker can exploit this...

6.5CVSS6.2AI score0.00258EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/11/14 12:00 a.m.•21 views

EUVD-2024-55081

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References3
CVE
CVE
•added 2025/11/14 12:00 a.m.•35 views

CVE-2024-44640

The PHPGurukul Student Record System 3.20 is vulnerable to a SQL Injection flaw within the add-course.php file. The root cause is a lack of proper validation and sanitization of externally entered SQL statements for the course-short , course-full , and cdate parameters. An attacker can exploit th...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/14 12:00 a.m.•19 views

PT-2025-46970

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.2.0 Description The software contains a SQL Injection flaw through the course-short, course-full, and cdate parameters in the 'add-course.php' file. This allows for potential unauthorized database...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/05/20 11:15 p.m.•25 views

CVE-2025-5004

A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/addcourse.php. The manipulation of the argument c/subname leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS7AI score0.00562EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/05/20 12:00 a.m.•21 views

Projectworlds Online Time Table Generator SQL Injection Vulnerability

Projectworlds Online Time Table Generator is an online time table generator from Projectworlds India. Projectworlds Online Time Table Generator version 1.0 suffers from a SQL injection vulnerability that stems from improper handling of the parameter c/subname in the file /admin/addcourse.php, whi...

9.8CVSS7.2AI score0.00562EPSS
SaveExploits1References5
CNVD
CNVD
•added 2025/05/14 12:00 a.m.•15 views

Student Record System add-course.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter course-short in the file /add-course.php. An attacker can exploit this vulnerability to...

9.8CVSS7.5AI score0.00555EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/04/30 11:15 a.m.•27 views

CVE-2025-4112

A vulnerability was found in PHPGurukul Student Record System 3.20. It has been declared as critical. This vulnerability affects unknown code of the file /add-course.php. The manipulation of the argument course-short leads to sql injection. The attack can be initiated remotely. The exploit has be...

9.8CVSS7AI score0.00555EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/04/30 11:00 a.m.•52 views

CVE-2025-4112 PHPGurukul Student Record System add-course.php sql injection

A vulnerability was found in PHPGurukul Student Record System 3.20. It has been declared as critical. This vulnerability affects unknown code of the file /add-course.php. The manipulation of the argument course-short leads to sql injection. The attack can be initiated remotely. The exploit has be...

7.5CVSS0.00555EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/30 12:00 a.m.•21 views

PHPGurukul Student Record System Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter course-short in the file /add-course.php. An attacker can exploit this vulnerability to...

9.8CVSS7.4AI score0.00555EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2024/10/28 12:15 p.m.•27 views

CVE-2024-10446

A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. Affected is an unknown function of the file /timetable/admin/admindashboard.php?info=addcourse. The manipulation of the argument c leads to sql injection. It is possible to launch the attack...

7.2CVSS6.4AI score0.00541EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/10/28 12:00 a.m.•21 views

Online Time Table Generator SQL Injection Vulnerability

Online Time Table Generator is an online time table generator by Yugesh Verma Personal Developer. A SQL injection vulnerability exists in Online Time Table Generator version 1.0, which stems from the parameter c in the file /timetable/admin/admindashboard.php?info=addcourse that can lead to SQL...

7.2CVSS6.6AI score0.00541EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/10/28 12:00 a.m.•20 views

PT-2024-16287 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Time Table Generator version 1.0 Description: A critical issue has been found in the software, affecting an unknown function of the file /timetable/admin/admindashboard.php?info=add course. The manipulation of the argume...

7.2CVSS6.4AI score0.00541EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2024/05/16 12:00 a.m.•22 views

Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. A SQL injection vulnerability exists in Online Examination System version 1.0, which originates from /adminpanel/admin/query/addCourseExe.php contains unknown code that leads to SQL injection via the...

9.8CVSS6.5AI score0.00575EPSS
SaveExploits1References5
Rows per page
Query Builder