Lucene search
K

11 matches found

OSV
OSV
added 2026/03/03 9:16 p.m.2 views

CVE-2026-3486

A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument rollno leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

7.2CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2026/03/03 9:16 p.m.2 views

CVE-2026-3486

A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument rollno leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

7.2CVSS0.00012EPSS
Exploits1References5
CVE
CVE
added 2026/03/03 9:2 p.m.6 views

CVE-2026-3486

CVE-2026-3486 affects itsourcecode College Management System 1.0. The issue is a SQL injection in the file /admin/student-fee.php caused by manipulation of the roll_no parameter, exploitable remotely, with public exploit/disclosure noted. The NVD metrics indicate high impact on confidentiality, i...

7.2CVSS5.8AI score0.00012EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2026/02/18 5:21 p.m.4 views

CVE-2025-70147

Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information including plaintext password field values via direct HTTP GET requests to these endpoints without a valid session...

7.5CVSS5.9AI score0.00281EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/02/18 12:0 a.m.5 views

Projectworlds Online Time Table Generator 安全漏洞

Projectworlds Online Time Table Generator is an online schedule generator developed by the Indian company Projectworlds. Version 1.0 of Projectworlds Online Time Table Generator has a security vulnerability. This vulnerability stems from the lack of authentication in files admin/student.php and...

7.5CVSS5.8AI score0.00281EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/08/31 12:32 p.m.6 views

CVE-2025-9729 PHPGurukul Online Course Registration student-registration.php sql injection

A vulnerability was detected in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of the file /admin/student-registration.php. Performing manipulation of the argument studentname results in sql injection. The attack is possible to be carried out remotely. The...

7.5CVSS0.00066EPSS
Exploits1References5
OSV
OSV
added 2025/07/14 12:15 p.m.2 views

CVE-2025-7601

A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/student-history.php. The manipulation of the argument stdid leads to cross site scripting. The attack can be initiated...

5.4CVSS3.7AI score0.00155EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/07/14 12:0 a.m.3 views

PHPGurukul Online Library Management System 代码注入漏洞

Online Library Management System is an online library management system. Online Library Management System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameter stdid in the file...

5.4CVSS4.9AI score0.00155EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/07/14 12:0 a.m.1 views

PHPGurukul Online Library Management System 注入漏洞

Online Library Management System is an online library management system. A SQL injection vulnerability exists in Online Library Management System, which originates from the lack of validation of externally-entered SQL statements in the parameter stdid in the file /admin/student-history.php. An...

8.8CVSS7.1AI score0.00205EPSS
Exploits1References6
OSV
OSV
added 2024/07/29 9:15 a.m.1 views

CVE-2024-7192

A vulnerability, which was classified as critical, was found in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/student.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

8.8CVSS6.2AI score
Exploits0References4
OSV
OSV
added 2024/04/18 11:15 a.m.1 views

CVE-2024-3948

A vulnerability was found in SourceCodester Home Clean Service System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file \admin\student.add.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack may be launch...

9.8CVSS5.3AI score0.00373EPSS
Exploits1References4
Rows per page
Query Builder