PT-2024-14296 · Unknown · Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: Simple Student Attendance System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via a crafted payload to the page or class month parameter in the "/php-attendance/attendance report...

CVE-2024-1923

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by this issue is the function deleteclass/deletestudent of the file /ajax-api.php of the component List of Classes Page. The manipulation of the argument id with the input...

CVE-2024-1923

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by this issue is the function deleteclass/deletestudent of the file /ajax-api.php of the component List of Classes Page. The manipulation of the argument id with the input...

CVE-2024-1923 SourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injection

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by this issue is the function deleteclass/deletestudent of the file /ajax-api.php of the component List of Classes Page. The manipulation of the argument id with the input...

CVE-2024-1923

SourceCodester Simple Student Attendance System 1.0 is affected by a SQL injection in the List of Classes Page, in the AJAX endpoint /ajax-api.php (delete_class/delete_student) via the id parameter with payload like 1337'+or+1=1;--+. This remote, unauthenticated vulnerability is triggered by user...

CVE-2024-1923 SourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injection

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by this issue is the function deleteclass/deletestudent of the file /ajax-api.php of the component List of Classes Page. The manipulation of the argument id with the input...

CVE-2024-1834

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&classid=1. The manipulation of the argument classdate with the input 2024-02-23%22%3E%3Cscript%3Ealert1%3C/script%3E...

Cross site scripting

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&classid=1. The manipulation of the argument classdate with the input 2024-02-23%22%3E%3Cscript%3Ealert1%3C/script%3E...

CVE-2024-1834 SourceCodester Simple Student Attendance System ?page=attendance&class_id=1 cross site scripting

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&classid=1. The manipulation of the argument classdate with the input 2024-02-23%22%3E%3Cscript%3Ealert1%3C/script%3E...

CVE-2024-1834

The CVE-2024-1834 entry describes a cross-site scripting (XSS) vulnerability in SourceCodester Simple Student Attendance System 1.0, affecting an unknown portion of the file at the endpoint ?page=attendance&class_id=1. By manipulating the class_date (examples show 2024-02-23%22%3E%3Cscript%3Ealer...

CVE-2024-25302

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

CVE-2024-25302

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

Sql injection

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

Event Student Attendance System SQL Injection Vulnerability

Event Student Attendance System is a student event attendance system by the individual developer Remy Andrade. An SQL injection vulnerability exists in Event Student Attendance System version 1.0, which originates from allowing SQL injection via the student parameter...

CVE-2024-25302

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

CVE-2024-25302

CVE-2024-25302 affects Sourcecodester Event Student Attendance System 1.0. The vulnerability is a SQL Injection in the parameter named student , as reported across sources (NVD/Red Hat/CNNVD/etc.). The root cause is improper handling of input leading to database query manipulation; no explicit ex...

CVE-2024-25302

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

PT-2024-20872 · Sourcecodester · Sourcecodester Student Attendance Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Event Student Attendance System version 1.0 Description: The issue allows SQL Injection via the student parameter. This could potentially lead to unauthorized access or manipulation of database content. There is no information...

Exploit for Code Injection in Oretnom23 Simple_Student_Attendance_System

CVE-2023-51801 Simple Student Attendance System v.1.0 - Mult...

CVE-2024-0389

A vulnerability, which was classified as critical, was found in SourceCodester Student Attendance System 1.0. Affected is an unknown function of the file attendancereport.php. The manipulation of the argument classid leads to sql injection. The exploit has been disclosed to the public and may be...