Lucene search
+L

63 matches found

NVD
NVD
•added 2024/10/27 6:15 p.m.•32 views

CVE-2024-10423

A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Affected is an unknown function of the file /student/projectselection/projectselection.php of the component Project Selection Page. The manipulation of the argument projectid lead...

9.8CVSS0.00534EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2024/10/27 6:15 p.m.•20 views

CVE-2024-10423

A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Affected is an unknown function of the file /student/projectselection/projectselection.php of the component Project Selection Page. The manipulation of the argument projectid lead...

9.8CVSS5.7AI score0.00534EPSS
SaveExploits1References4
CVE
CVE
•added 2024/10/27 6:00 p.m.•83 views

CVE-2024-10423

CVE-2024-10423 affects Project Worlds Student Project Allocation System 1.0, specifically the /student/project_selection/project_selection.php file. The vulnerability arises from the project_id parameter, enabling remote SQL injection. Public exploit details exist. No patch/fix is confirmed in th...

9.8CVSS7.1AI score0.00534EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/10/27 6:00 p.m.•39 views

CVE-2024-10423 Project Worlds Student Project Allocation System Project Selection Page project_selection.php sql injection

A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Affected is an unknown function of the file /student/projectselection/projectselection.php of the component Project Selection Page. The manipulation of the argument projectid lead...

6.5CVSS0.00534EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/10/27 6:00 p.m.•17 views

CVE-2024-10423 Project Worlds Student Project Allocation System Project Selection Page project_selection.php sql injection

A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Affected is an unknown function of the file /student/projectselection/projectselection.php of the component Project Selection Page. The manipulation of the argument projectid lead...

6.5CVSS6.8AI score0.00534EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/10/27 12:00 a.m.•7 views

PT-2024-16270

Name of the Vulnerable Software and Affected Versions Project Worlds Student Project Allocation System version 1.0 Description A critical issue was found in the Project Selection Page component, specifically in the file /student/project selection/move up project.php. The manipulation of the up...

9.8CVSS5.5AI score0.00572EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/27 12:00 a.m.•9 views

CVE-2024-10425: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /student/projectselection/moveupproject.php of the component Project Selection Page. The manipulation of the argument up...

9.8CVSS6.3AI score0.00572EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/27 12:00 a.m.•9 views

CVE-2024-10423: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Affected is an unknown function of the file /student/projectselection/projectselection.php of the component Project Selection Page. The manipulation of the argument projectid lead...

9.8CVSS6.3AI score0.00534EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/27 12:00 a.m.•7 views

CVE-2024-10424: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/projectselection/removeproject.php of the component Project Selection Page. The manipulation of the...

9.8CVSS6.3AI score0.00572EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/27 12:00 a.m.•17 views

Project Worlds Student Project Allocation System security vulnerability

Project Worlds Student Project Allocation System is a student project allocation system from Project Worlds, Inc. A security vulnerability exists in Project Worlds Student Project Allocation System version 1.0, which originates in the /student/projectselection/moveupproject.php of the Project...

9.8CVSS6.8AI score0.00572EPSS
SaveExploits1References4
Packet Storm
Packet Storm
•added 2024/03/20 12:00 a.m.•511 views

Teacher Subject Allocation Management System 1.0 SQL Injection

Exploit Title: Teacher Subject Allocation Management System 1.0 - 'searchdata' SQLi Date: 2023-11-15 Exploit Author: Ersin Erenler Vendor Homepage: https://phpgurukul.com/teacher-subject-allocation-system-using-php-and-mysql Software Link:...

7.5CVSS7.4AI score0.01079EPSS
SaveExploits4
Prion
Prion
•added 2024/01/19 6:15 p.m.•36 views

Cross site scripting

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file adminlogin.php of the component Admin Login Module. The manipulation of the argument msg with the input...

5CVSS6.5AI score0.00643EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2024/01/19 5:31 p.m.•91 views

CVE-2024-0726

CVE-2024-0726 affects Project Worlds Student Project Allocation System 1.0, specifically the Admin Login Module via the file admin_login.php. The vulnerability is a cross-site scripting (XSS) flaw caused by manipulating the msg argument (example input: test%22%3Cscript%3Ealert(%27Torada%27)%3C/sc...

6.1CVSS6AI score0.00643EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/19 5:31 p.m.•26 views

CVE-2024-0726 Project Worlds Student Project Allocation System Admin Login Module admin_login.php cross site scripting

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file adminlogin.php of the component Admin Login Module. The manipulation of the argument msg with the input...

5CVSS6.2AI score0.00643EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/01/19 5:31 p.m.•55 views

CVE-2024-0726 Project Worlds Student Project Allocation System Admin Login Module admin_login.php cross site scripting

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file adminlogin.php of the component Admin Login Module. The manipulation of the argument msg with the input...

5CVSS6.2AI score0.00643EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/01/19 12:00 a.m.•23 views

Project Worlds Student Project Allocation System Security Vulnerability

Project Worlds Student Project Allocation System is a student project allocation system from Project Worlds. A security vulnerability exists in Project Worlds Student Project Allocation System version 1.0, which stems from the parameter msg in the file adminlogin.php that can lead to cross-site...

6.1CVSS6.3AI score0.00643EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/19 12:00 a.m.•9 views

CVE-2024-0726: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file adminlogin.php of the component Admin Login Module. The manipulation of the argument msg with the input...

6.1CVSS3.6AI score0.00643EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/12/10 10:15 a.m.•18 views

CVE-2023-6649

A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file index.php. The manipulation of the argument searchdata with the input alert5 leads to cross site scripting. The attack c...

6.1CVSS3.8AI score0.00751EPSS
SaveExploits1References3
CNVD
CNVD
•added 2023/11/16 12:00 a.m.•21 views

Teacher Subject Allocation Management System profile.php file cross-site scripting vulnerability

Teacher Subject Allocation Management System a teacher subject allocation management system. Teacher Subject Allocation Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adminname and email...

4.8CVSS6.3AI score0.00423EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2023/11/14 10:15 p.m.•15 views

CVE-2023-46025

SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter...

4.9CVSS5.8AI score0.00654EPSS
SaveExploits1References1
Rows per page
Query Builder