CrocoTime Employee Attendance DoS

The vulnerability of the CrocoTime employee attendance system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CrocoTime authorization Unauthorized Access

The vulnerability of the CrocoTime employee time management system is related to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2024-39250

CVE-2024-39250 PoC nuclei template Efrotech's http://www.efrotech.com/ TimeTrax https://etimetrax.com/ is a Human Resources attendance tracking program, and I found an unauthenticated SQL Injection vulnerability. It is easy to execute the attack vector, so I created a nuclei template...

CVE-2026-37749

CVE-2026-37749 — CodeAstro Simple Attendance Management System 1.0 - SQL Injection Details Field| Info ---|--- CVE ID| CVE-2026-37749 Type| SQL Injection → Authentication Bypass Severity| Critical CVSSv3: 9.8 Vendor| CodeAstro Product| Simple Attendance Management System Version| 1.0 Discoverer|...

CVE-2026-127282

A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality of the file resetpassword.php. This manipulation of the argument Username causes cross site scripting. The attack is possible to be carried...

EUVD-2026-124817

A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality of the file resetpassword.php. This manipulation of the argument Username causes cross site scripting. The attack is possible to be carried...

CVE-2026-127282

The SourceCodester Smart Attendance System with QR Code Scanner 1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw. The vulnerability exists within an unknown functionality of the reset_password.php file, where the application fails to properly neutralize the Username argument. This allows an...

PT-2026-146117

A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality of the file reset password.php. This manipulation of the argument Username causes cross site scripting. The attack is possible to be carrie...

CVE-2023-51802

CVE-2023-51802 Simple Student Attendance System v.1.0 - Cross-site scripting XSS vulnerabilities in attendancereport Description : Cross Site Scripting vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the "page...

CVE-2025-25615

CVE-2025-25615 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to view the attendance list for all class sections. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to the following endpoint:...

CVE-2025-25621

CVE-2025-25621 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to take attendance of fellow teachers through the endpoint /courses/teacher/index?teacherid=2&semesterid=1. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Naviga...

CVE-2023-51801

CVE-2023-51801 Simple Student Attendance System v.1.0 - Multiple SQL injection vulnerabilities - studentform.php and classform.php Description :Simple Student Attendance System v.1.0 is prone to multiple SQL injection vulnerabilities that can be exploited by authenticated attackers. These...

EUVD-2026-120516

A flaw has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This affects an unknown function of the file resetpassword.php of the component Password Reset. This manipulation of the argument username/password causes weak password recovery. The attack is possible to be...

EUVD-2026-120518

A vulnerability has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This impacts the function getMessage of the file createadmin.php of the component Admin Account Creation. Such manipulation of the argument e leads to missing authentication. The attack may be...

EUVD-2026-120570

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected is an unknown function of the file api/attendancehandler.php of the component JSON Endpoint. Performing a manipulation of the argument studentcode results in missing authentication. It is possib...

EUVD-2026-120653

A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been public...

CVE-2026-125077

A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been public...

CVE-2026-125076

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected is an unknown function of the file api/attendancehandler.php of the component JSON Endpoint. Performing a manipulation of the argument studentcode results in missing authentication. It is possib...

CVE-2026-125078

A security flaw has been discovered in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This affects an unknown part of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has been released to the public and may be us...

CVE-2026-125078 SourceCodester Smart Attendance System with QR Code Scanner login.php session fixiation

A security flaw has been discovered in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This affects an unknown part of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has been released to the public and may be us...