Kashipara Online Attendance Management System 安全漏洞

Kashipara Online Attendance Management System is an online attendance management system from Kashipara open source. A security vulnerability exists in Kashipara Online Attendance Management System version V1.0, which stems from a stored cross-site scripting XSS vulnerability that allows remote...

CVE-2025-1189

A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the file /admin/chart1.php. The manipulation of the argument courseid leads to sql injection. It is possible to initiate the attack remotely. Th...

CVE-2025-1189

A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the file /admin/chart1.php. The manipulation of the argument courseid leads to sql injection. It is possible to initiate the attack remotely. Th...

CVE-2025-1189 1000 Projects Attendance Tracking Management System chart1.php sql injection

A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the file /admin/chart1.php. The manipulation of the argument courseid leads to sql injection. It is possible to initiate the attack remotely. Th...

CVE-2025-1189

CVE-2025-1189 affects 1000 Projects Attendance Tracking Management System v1.0. A SQL injection vulnerability exists in the /admin/chart1.php page via the course_id parameter, allowing remote exploitation as described in multiple sources. Exploitation details beyond the basic vector are not provi...

PT-2025-6470 · Unknown · 1000 Projects Attendance Tracking Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Attendance Tracking Management System version 1.0 Description: A critical vulnerability was found in the 1000 Projects Attendance Tracking Management System. This issue affects an unknown part of the file /admin/chart1.php. The...

CVE-2020-8494

In Kronos Web Time and Attendance webTA 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeeper, Master Timekeeper, or HR Admin privileges to gain unauthorized administrative privileges within the application via the empid, userid, pw...

CVE-2020-8495

In Kronos Web Time and Attendance webTA 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an attacker with Timekeeper or Supervisor privileges to gain unauthorized administrative privileges within the application via the delegate, delegateRole, and...

CVE-2024-12497

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

CVE-2024-12927

A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected by this issue is some unknown functionality of the file /faculty/checkfacultylogin.php. The manipulation of the argument facultyemailid leads to sql injection. Th...

CVE-2024-12899

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/courseaction.php. The manipulation of the argument coursecode leads to sql injection. The attack may be initiated...

CVE-2024-12787

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...

CVE-2024-12946

A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. This issue affects some unknown processing of the file /admin/adminaction.php. The manipulation of the argument adminusername leads to sql injection. The attack may be...

CVE-2024-12940

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/studentaction.php. The manipulation of the argument studentid leads to sql injection. The attack can be initiated...

CVE-2024-33968

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Attendance' and 'YearLevel' in...

CVE-2024-33973

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Attendance' and 'YearLevel' in...

CVE-2025-0536

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/editaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-0536

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/editaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-0536 1000 Projects Attendance Tracking Management System edit_action.php sql injection

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/editaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-0536

CVE-2025-0536 affects 1000 Projects Attendance Tracking Management System 1.0. A vulnerability in /admin/edit_action.php allows manipulating the attendance_id parameter to cause SQL injection. The attack is remotely executable, and the exploit has been disclosed publicly. NVD lists a high/critica...