2 matches found
CVE-2026-2156: Improper Neutralization of Input During Web Page Generation
A weakness has been identified in code-projects Online Student Management System 1.0. The impacted element is an unknown function of the file /admin/announcement/index.php?view=add of the component Announcement Management Module. This manipulation causes cross site scripting. The attack is possib...
4.8CVSS3.7AI score0.00235EPSS
SaveExploits1References1
CVE-2022-39976: Improper Neutralization of Special Elements used in an SQL Command
School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /modules/announcement/index.php?view=edit&id=...
9.8CVSS8.2AI score0.00897EPSS
SaveExploits1References3
20