1190 matches found
PT-2022-25410 · Unknown · Attendance Management System
Name of the Vulnerable Software and Affected Versions: Student Attendance Management System affected versions not specified Description: A critical issue affects the Student Attendance Management System, specifically the file /Admin/createClass.php. The manipulation of the Id argument leads to sq...
Student Attendance Management System SQL注入漏洞
Student Attendance Management System is an attendance management system for students.A security vulnerability exists in Student Attendance Management System, which stems from a SQL injection issue in the Id parameter of the /Admin/createClass.php file. No detailed vulnerability details are...
CVE-2022-4052 Student Attendance Management System createClass.php sql injection
A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some unknown processing of the file /Admin/createClass.php. The manipulation of the argument Id leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2022-4052 Student Attendance Management System createClass.php sql injection
A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some unknown processing of the file /Admin/createClass.php. The manipulation of the argument Id leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2022-4053 Student Attendance Management System createClass.php cross site scripting
A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an unknown function of the file createClass.php. The manipulation of the argument className leads to cross site scripting. It is possible to launch the attack remotely. The exploi...
CVE-2022-4052
CVE-2022-4052 affects the Student Attendance Management System. The vulnerability is a SQL injection in the Id parameter of the file /Admin/createClass.php caused by unsanitized input, allowing remote exploitation. Several connected sources corroborate the problem and classify it as critical with...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code for attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Senayan Library Management System version v9.4.2, which was discovered to contain an SQL injection...
ZKTeco ZEM/ZMM Web Interface 安全漏洞
The ZKTeco ZEM/ZMM Web Interface is a web interface for time and attendance devices from the Chinese company ZKTeco. A security vulnerability exists in the ZKTeco ZEM/ZMM Web Interface that stems from a missing authentication issue...
LinkedIn: IDOR to make someone attend or leave an event
An Insecure Direct Object Reference IDOR vulnerability was discovered in LinkedIn's event attendance functionality. The vulnerability allowed an attacker to manipulate event attendance by modifying the fsdprofile parameter in POST requests to the voyagerScheduledcontentDashViewerStates API...
ZKSecurity BIO 3.0.5.0_R Privilege Escalation
ADVISORY INFORMATION Product: ZKSecurity BIO Vendor: ZKTeco Version Affected: 3.0.5.0R CVE: CVE-2022-36634 Vulnerability: User privilege escalation CREDIT This vulnerability was discovered and researched by Caio Burgardt and Silton Santos. INTRODUCTION Based on the hybrid biometric technology and...
Synel Eharmonynew 跨站脚本漏洞
Synel Eharmonynew is a time and attendance system from Synel Israel. A security vulnerability exists in Synel Eharmonynew. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in the idno parameter of the /card/in-card.php file in version 1.0 of the Library Management System, which c...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in the v1.0 version of Library Management System due to an SQL injection issue in the id parameter of the...
Library Management System 跨站脚本漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Individual Developer. A cross-site scripting vulnerability exists in Library Management System, which stems from unknown code in the file /qr/I/ being affected,...
Library Management System SQL Injection Vulnerability (CNVD-2022-61297)
Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to SQL injection, which stems from a missing parameter id in the file /librarian/bookdetails.php validation of externally...
Library Management System File Upload Vulnerability
Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to file uploads due to a lack of validation of uploaded files in the parameter image in the file /card/index.php. The...
Library Management System 跨站脚本漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System has a cross-site scripting vulnerability that originates in the file /admin/editadmindetails.php?id= The admin's parameter Name lacks a...
Library Management System With QR Code 1.0 SQL Injection Vulnerability
Title: Library Management System with QR code Attendance 1.0 SQL Injection Author: Ashish Kumar https://www.linkedin.com/in/ashish-kumar-0b65a3184 Vendor: https://www.sourcecodester.com/users/kingbhob02 Software:...
Library Management System With QR Code 1.0 SQL Injection
Title: Library Management System with QR code Attendance 1.0 SQL Injection Author: Ashish Kumar https://www.linkedin.com/in/ashish-kumar-0b65a3184 Date: 27.06.2022 Vendor: https://www.sourcecodester.com/users/kingbhob02 Software:...
Library Management System 代码问题漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to file uploads due to a lack of validation of uploaded files in the parameter image in the file /card/index.php. The...