Lucene search
+L

321 matches found

CNNVD
CNNVD
added 2025/02/14 12:0 a.m.6 views

Kashipara Online Attendance Management System 安全漏洞

Kashipara Online Attendance Management System is an online attendance management system from Kashipara open source. A security vulnerability exists in Kashipara Online Attendance Management System version V1.0, which stems from a stored cross-site scripting XSS vulnerability that allows remote...

5.6CVSS6AI score0.00321EPSS
SaveExploits1References1
OSV
OSV
added 2024/12/29 8:15 a.m.5 views

CVE-2024-13005

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

9.8CVSS5.8AI score0.0068EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/12/29 12:0 a.m.8 views

1000 Projects Attendance Tracking Management System 注入漏洞

1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Attendance Tracking Management System, which originates from an SQL injection vulnerability in the attendanceid...

9.8CVSS7AI score0.0068EPSS
SaveExploits1References5
OSV
OSV
added 2024/12/26 10:15 a.m.3 views

CVE-2024-12946

A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. This issue affects some unknown processing of the file /admin/adminaction.php. The manipulation of the argument adminusername leads to sql injection. The attack may be...

9.8CVSS5.8AI score0.00583EPSS
SaveExploits1References5
OSV
OSV
added 2024/12/23 1:15 a.m.5 views

CVE-2024-12898

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/facultyaction.php. The manipulation of the argument facultycourseid leads to sql injection. The attack can be initiate...

9.8CVSS5.8AI score0.00529EPSS
SaveExploits1References5
OSV
OSV
added 2024/12/19 4:15 p.m.7 views

CVE-2024-12787

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...

9.8CVSS6.9AI score0.00647EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/12/19 12:0 a.m.6 views

PT-2024-17737 · Unknown · 1000 Projects Attendance Tracking Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Attendance Tracking Management System version 1.0 Description: A critical issue has been identified in the 1000 Projects Attendance Tracking Management System, affecting an unknown functionality of the file /student/check studen...

9.8CVSS7.8AI score0.00647EPSS
SaveExploits0References9
OSV
OSV
added 2024/10/27 5:15 p.m.5 views

CVE-2024-10421

A vulnerability classified as critical was found in SourceCodester Attendance and Payroll System 1.0. This vulnerability affects unknown code of the file /admin/overtimerow.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00398EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/10/27 12:0 a.m.3 views

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code based Attendance and Payroll System by oretnom23. An SQL injection vulnerability exists in Attendance and Payroll System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the /admin/overtimeadd.php pa...

9.8CVSS7.1AI score0.00414EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/26 4:15 p.m.8 views

CVE-2024-8172

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. This issue affects some unknown processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads to cross site scripting. The attack...

6.1CVSS3.9AI score0.0042EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2024/08/26 4:0 p.m.41 views

CVE-2024-8172 SourceCodester QR Code Attendance System delete-student.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. This issue affects some unknown processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads to cross site scripting. The attack...

5.3CVSS0.0042EPSS
SaveExploits1References6
CVE
CVE
added 2024/08/26 4:0 p.m.54 views

CVE-2024-8172

SourceCodester QR Code Attendance System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the endpoint /endpoint/delete-student.php, triggered by manipulating the student/attendance parameter. The issue arises from handling user input and may be exploitable remotely; public exploi...

6.1CVSS6.4AI score0.0042EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/26 4:0 p.m.15 views

CVE-2024-8172 SourceCodester QR Code Attendance System delete-student.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. This issue affects some unknown processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads to cross site scripting. The attack...

5.3CVSS6.6AI score0.0042EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/08/26 12:0 a.m.8 views

SourceCodester QR Code Attendance System 跨站脚本漏洞

SourceCodester QR Code Attendance System is an open source QR code attendance system from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester QR Code Attendance System version 1.0, which stems from the manipulation of the parameter student/attendance that can lead to...

6.1CVSS4.7AI score0.0042EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/08/26 12:0 a.m.8 views

PT-2024-38857 · Sourcecodester · Sourcecodester Qr Code Attendance System

Name of the Vulnerable Software and Affected Versions: SourceCodester QR Code Attendance System version 1.0 Description: A problematic issue has been found in the system, affecting the processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads t...

6.1CVSS4.4AI score0.0042EPSS
SaveExploits1References10
Cvelist
Cvelist
added 2024/08/14 6:55 a.m.29 views

CVE-2024-7732 SECOM Dr.ID Attendance system - Unrestricted File Upload

Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...

9.8CVSS0.00943EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/06 1:15 p.m.7 views

CVE-2024-33987

Cross-Site Scripting XSS vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate', 'YearLevel...

6.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/06 1:15 p.m.5 views

CVE-2024-33982

Cross-Site Scripting XSS vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'StudentID' parameter in...

6.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/21 12:15 a.m.23 views

CVE-2024-6212

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function getstudent of the file studentform.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. Th...

6.1CVSS0.00496EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/06/21 12:0 a.m.13 views

CVE-2024-6212 SourceCodester Simple Student Attendance System student_form.php get_student cross site scripting

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function getstudent of the file studentform.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. Th...

5.3CVSS6.2AI score0.00496EPSS
SaveExploits1References4
Rows per page
Query Builder