Lucene search
+L

42 matches found

Kitploit
Kitploit
•added 2026/09/25 2:46 p.m.•11 views

CVE-2022-41445

CVE-2022-41445 CodeIgniter를 사용하는 교사 기록 관리 시스템의 사이트 간 스크립팅 XSS 제안된 설명 CodeIgniter 1.0을 사용하는 기록 관리 시스템에서의 사이트 간 스크립팅 XSS 취약점으로, 공격자가 Add Subject 페이지에 제작된 페이로드를 주입하여 임의의 웹 스크립트나 HTML을 실행할 수 있습니다. 추가 정보 개념 증명PoC: https://phpgurukul.com/teachers-record-management-system-using-codeigniter/ 취약점 유형 사이트 간...

4.8CVSS5.7AI score0.01085EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/12/03 12:26 a.m.•27 views

CVE-2025-64070

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

5.4CVSS6.2AI score0.00201EPSS
SaveExploits1References1
NVD
NVD
•added 2025/12/02 5:16 p.m.•18 views

CVE-2025-64070

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

5.4CVSS0.00201EPSS
SaveExploits1References2
OSV
OSV
•added 2025/12/02 5:16 p.m.•20 views

CVE-2025-64070

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

5.4CVSS5.8AI score0.00201EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/12/02 12:00 a.m.•30 views

CVE-2025-64070

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

0.00201EPSS
SaveExploits1References2
CNVD
CNVD
•added 2025/11/18 12:00 a.m.•16 views

Student Record System add-subject.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the sub1, sub2, sub3, sub4, and course-short parameters of add-subject.php. An attacker can exploit this...

6.5CVSS8.3AI score0.0024EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/15 12:47 a.m.•23 views

CVE-2024-44639

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...

6.5CVSS8AI score0.0024EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/14 4:15 p.m.•15 views

CVE-2024-44639

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/14 12:00 a.m.•22 views

PHPGurukul Student Record System 安全漏洞

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the sub1, sub2, sub3, sub4, and course-short parameters of add-subject.php. An attacker can exploit this...

6.5CVSS8.1AI score0.0024EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/11/14 12:00 a.m.•16 views

PT-2025-46969

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.2.0 Description The software contains a SQL Injection flaw through the sub1, sub2, sub3, sub4, and course-short parameters in the 'add-subject.php' file. This allows for potential unauthorized databas...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/11/14 12:00 a.m.•17 views

EUVD-2024-55080

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/11/14 12:00 a.m.•8 views

CVE-2024-44639

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...

7.6AI score0.0024EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/11/14 12:00 a.m.•25 views

CVE-2024-44639

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...

0.0024EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/09/29 1:48 p.m.•13 views

CVE-2025-11105

A flaw has been found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /schedulingsystem/addsubject.php. This manipulation of the argument subcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

7.5CVSS6.6AI score0.00417EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/24 5:35 a.m.•26 views

CVE-2025-10783

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addsubject.php. Executing manipulation of the argument subjectcode can lead to sql injection. The attack may be performed from remote. T...

9.8CVSS7AI score0.00421EPSS
SaveExploits1References1
NVD
NVD
•added 2025/09/22 5:15 a.m.•13 views

CVE-2025-10783

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addsubject.php. Executing manipulation of the argument subjectcode can lead to sql injection. The attack may be performed from remote. T...

9.8CVSS0.00421EPSS
SaveExploits1References5
OSV
OSV
•added 2025/09/22 5:15 a.m.•11 views

CVE-2025-10783

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addsubject.php. Executing manipulation of the argument subjectcode can lead to sql injection. The attack may be performed from remote. T...

9.8CVSS5.7AI score0.00421EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/22 5:02 a.m.•7 views

CVE-2025-10783 Campcodes Online Learning Management System add_subject.php sql injection

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addsubject.php. Executing manipulation of the argument subjectcode can lead to sql injection. The attack may be performed from remote. T...

7.5CVSS6.6AI score0.00421EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/22 5:02 a.m.•27 views

CVE-2025-10783 Campcodes Online Learning Management System add_subject.php sql injection

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addsubject.php. Executing manipulation of the argument subjectcode can lead to sql injection. The attack may be performed from remote. T...

7.5CVSS0.00421EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/22 5:02 a.m.•32 views

CVE-2025-10783

CVE-2025-10783 affects Campcodes Online Learning Management System v1.0; vulnerability in /admin/add_subject.php where manipulating the subject_code parameter can cause SQL injection. Exploitation is remote and public exploits exist. No official patch details in provided docs; consider temporary ...

9.8CVSS7.2AI score0.00421EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder