Alumni Management System 1.0 - _Last Name field in Registration page_ Stored XSS

Exploit Title: Alumni Management System 1.0 - "Last Name field in Registration page" Stored XSS Exploit Author: Siva Rajendran Date: 2020-12-31 Vendor Homepage: https://www.sourcecodester.com/php/14524/alumni-management-system-using-phpmysql-source-code.html Software Link:...

CVE-2020-28071

SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting XSS in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' and reach a stored XSS...

CVE-2020-28070

SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in viewevent.php via the 'id' parameter...

CVE-2020-28070

SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in viewevent.php via the 'id' parameter...

Cross site scripting

SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting XSS in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' and reach a stored XSS...

CVE-2020-28071

SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting XSS in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' and reach a stored XSS...

CVE-2020-28070

SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in viewevent.php via the 'id' parameter...

CVE-2020-28070

The CVE-2020-28070 entry affects SourceCodester Alumni Management System 1.0. A SQL injection vulnerability exists in view_event.php via the GET parameter id, enabling arbitrary remote code execution. Public sources (e.g., PacketStorm) describe blind SQL injection exploitable through the id param...

Alumni Management System 1.0 SQL Injection

Exploit Title: Alumni Management System 1.0 - 'id' SQL Injection Exploit Author: Aakash Madaan Date: 2020-12-17 Vendor Homepage: https://www.sourcecodester.com/php/14524/alumni-management-system-using-phpmysql-source-code.html Software Link:...

Alumni Management System 1.0 Cross Site Scripting

Exploit Title: Alumni Management System 1.0 - "Course Form" Stored XSS Exploit Author: Aakash Madaan Date: 2020-12-10 Vendor Homepage: https://www.sourcecodester.com/php/14524/alumni-management-system-using-phpmysql-source-code.html Software Link:...

Sourcecodester Alumni Management System SQL Injection Vulnerability

Sourcecodester Alumni Management System is a Php, Mysql based alumni management system from Sourcecodester, Inc. in the United States. Sourcecodester Alumni Management System version 1.0 suffers from a SQL injection vulnerability, SQL injection was originally discovered by Ankita Pal in October...

Alumni Management System 1.0 Cross Site Scripting

Exploit Title: Stored XSS on Alumni Management System Date: 23/10/2020 Exploit Author: Valerio Alessandroni Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/14524/alumni-management-system-using-phpmysql-s ource-code.html Version: 1.0 Tested on:...

Sourcecodester Alumni Management System 跨站脚本漏洞

Sourcecodester Alumni Management System is an alumni management system. Sourcecodester Alumni Management System suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in the web application, which can be exploited by an attacker to...

Alumni Management System 1.0 Blind SQL Injection

Exploit Title: Blind SQL injection on Alumni Management System Date: 23/10/2020 Exploit Author: Valerio Alessandroni Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/14524/alumni-management-system-using-phpmysql-s ource-code.html Version: 1.0 Teste...

Sourcecodester Alumni Management System Remote Code Execution Vulnerability

Sourcecodester Alumni Management System is a Php, Mysql based alumni management system from Sourcecodester, Inc. A remote code execution vulnerability exists in the SourceCodester Alumni Management System version 1.0, which can be exploited by an authenticated attacker to upload an arbitrary file...

CVE-2020-28072

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE...

Remote code execution

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE...

CVE-2020-28072

CVE-2020-28072 affects DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary PHP files via gallery.php and execute them on the server, achieving Remote Code Execution. Root cause is improper file upload handling enabling arbitrary file upload and execution. E...

CVE-2020-28072

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE...

DourceCodester Alumni Management System 代码问题漏洞

Sourcecodester Alumni Management System is a Php, Mysql based alumni management system from Sourcecodester, Inc. A remote code execution vulnerability exists in the SourceCodester Alumni Management System version 1.0, which can be exploited by an authenticated attacker to upload an arbitrary file...