323 matches found
CVE-2024-6212
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function getstudent of the file studentform.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. Th...
CVE-2024-6212 SourceCodester Simple Student Attendance System student_form.php get_student cross site scripting
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function getstudent of the file studentform.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. Th...
CVE-2024-6212 SourceCodester Simple Student Attendance System student_form.php get_student cross site scripting
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function getstudent of the file studentform.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. Th...
CVE-2024-6212
CVE-2024-6212 affects SourceCodester Simple Student Attendance System 1.0. The vulnerability is in the file student_form.php, function get_student, where manipulating the id parameter enables cross-site scripting. The issue can be exploited remotely and has been publicly disclosed (VDB-269276). A...
School Intramurals Student Attendance Management System SQL注入漏洞
School Intramurals Student Attendance Management System is an on-campus student attendance management system by the individual developer oretnom23. A SQL injection vulnerability exists in SourceCodester School Intramurals Student Attendance Management System version 1.0, which originates from...
PT-2024-35892 · Sourcecodester · Sourcecodester School Intramurals Student Attendance Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester School Intramurals Student Attendance Management System version 1.0 Description: A critical issue has been identified, affecting the file /manage sy.php. The manipulation of the id argument leads to sql injection. This issue ca...
CVE-2024-4926
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /intramssams/managestudent.php. The manipulation of the argument id leads to sql injection. It is possible to...
School Intramurals Student Attendance Management System Security Vulnerability
Student Attendance Management System is a student attendance management system. A security vulnerability exists in School Intramurals Student Attendance Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...
PT-2024-33398 · Sourcecodester · Sourcecodester School Intramurals Student Attendance Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester School Intramurals Student Attendance Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /intrams sams/manage student.php. The manipulation of the...
CVE-2024-25551
Cross Site Scripting XSS vulnerability in sourcecodester Simple Student Attendance System v1.0 allows attackers to execute arbitrary code via crafted GET request to web application URL...
Cross site scripting
Cross Site Scripting XSS vulnerability in sourcecodester Simple Student Attendance System v1.0 allows attackers to execute arbitrary code via crafted GET request to web application URL...
Simple Student Attendance System Security Vulnerability
Simple Student Attendance System is a simple student attendance system. A security vulnerability exists in Simple Student Attendance System v1.0, which stems from a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary code via a crafted GET request...
PT-2024-20999 · Unknown · Sourcecodester Simple Student Attendance System
Name of the Vulnerable Software and Affected Versions: sourcecodester Simple Student Attendance System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted GET request to the web application URL. This is a Cross Site Scripting XSS vulnerability, which means ...
CVE-2024-25551
CVE-2024-25551 is a Cross Site Scripting (XSS) vulnerability affecting sourcecodester Simple Student Attendance System v1.0. A crafted GET request to the web application URL can allow an attacker to execute arbitrary code. Root cause details are not expanded beyond the XSS description in the prov...
CVE-2023-51802
Cross Site Scripting XSS vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the page or classmonth parameter in the /php-attendance/attendancereport component...
CVE-2023-51801
SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the studentform.php and the classform.php pages...
CVE-2023-51801
SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the studentform.php and the classform.php pages...
CVE-2023-51801
CVE-2023-51801 concerns a SQL injection in the Simple Student Attendance System v1.0, exploitable via the id parameter in student_form.php and class_form.php. Reported by multiple sources (Red Hat, CNNVD, PRION, NVD/CVE lists) as allowing remote code execution with high impact (C/H/I/A = 9.8). Af...
CVE-2023-51802
CVE-2023-51802 concerns a Cross Site Scripting (XSS) in the Simple Student Attendance System v1.0. According to multiple sources, the vulnerability affects the /php-attendance/attendance_report component and can be triggered via crafted payloads to the page or class_month parameters, potentially ...
CVE-2023-51801
SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the studentform.php and the classform.php pages...