CVE-2024-24257

The CVE-2024-24257 entry concerns skteco.com Central Control Attendance Machine Web Management Platform (v3.0). The vulnerability is described as an Information Disclosure: a crafted script targeting the csl/user component may allow an attacker to obtain sensitive information. Concrete technical ...

CVE-2024-24257

An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information via a crafted script to the csl/user component...

ZKTeco Central Control Attendance Machine Web Management Platform 安全漏洞

ZKTeco Central Control Attendance Machine Web Management Platform is a centralized control time and attendance machine web management platform from ZKTeco, China. A security vulnerability exists in Zkteco Central Control Attendance Machine Web Management Platform version v.3.0. An attacker can...

PT-2024-20328 · Skteco.Com · Skteco.Com Central Control Attendance Machine Web Management Platform

Name of the Vulnerable Software and Affected Versions: skteco.com Central Control Attendance Machine web management platform version 3.0 Description: The issue allows an attacker to obtain sensitive information via a crafted script to the "csl/user" component. Recommendations: For version 3.0,...

CVE-2024-6274 lahirudanushka School Management System Attendance Report Page attendancelist.php sql injection

A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affects an unknown part of the file /attendancelist.php of the component Attendance Report Page. The manipulation of the argument aid leads to sql injection. It is possible to initia...

Ross Anderson’s Memorial Service

The memorial service for Ross Anderson will be held on Saturday, at 2:00 PM BST. People can attend remotely on Zoom. The passcode is "L3954FrrEF"...

CVE-2024-6212

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function getstudent of the file studentform.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. Th...

CVE-2024-6212

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function getstudent of the file studentform.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. Th...

CVE-2024-6212 SourceCodester Simple Student Attendance System student_form.php get_student cross site scripting

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function getstudent of the file studentform.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. Th...

CVE-2024-6212 SourceCodester Simple Student Attendance System student_form.php get_student cross site scripting

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function getstudent of the file studentform.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. Th...

CVE-2024-6212

CVE-2024-6212 affects SourceCodester Simple Student Attendance System 1.0. The vulnerability is in the file student_form.php, function get_student, where manipulating the id parameter enables cross-site scripting. The issue can be exploited remotely and has been publicly disclosed (VDB-269276). A...

Malicious code in atoz-attendance-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff390162beebf06ba564766a3ffc0a06c520792994c16cba3ea0d97ea64d1f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1594 Malicious code in atoz-attendance-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff390162beebf06ba564766a3ffc0a06c520792994c16cba3ea0d97ea64d1f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-5378

A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /managesy.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...

CVE-2024-5378 SourceCodester School Intramurals Student Attendance Management System manage_sy.php sql injection

A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /managesy.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...

CVE-2024-5378 SourceCodester School Intramurals Student Attendance Management System manage_sy.php sql injection

A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /managesy.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...

School Intramurals Student Attendance Management System SQL注入漏洞

School Intramurals Student Attendance Management System is an on-campus student attendance management system by the individual developer oretnom23. A SQL injection vulnerability exists in SourceCodester School Intramurals Student Attendance Management System version 1.0, which originates from...

PT-2024-35892 · Sourcecodester · Sourcecodester School Intramurals Student Attendance Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester School Intramurals Student Attendance Management System version 1.0 Description: A critical issue has been identified, affecting the file /manage sy.php. The manipulation of the id argument leads to sql injection. This issue ca...

CVE-2024-5114

A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/teacherattendancehistory1.php. The manipulation of the argument index leads to sql injection. It is possible to launch the attack...

CVE-2024-5114

A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/teacherattendancehistory1.php. The manipulation of the argument index leads to sql injection. It is possible to launch the attack...