3 matches found
CVE-2025-65135: Improper Neutralization of Special Elements used in an SQL Command
In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin/between-date-reprtsdetails.php through the fromdate POST parameter...
9.8CVSS5.8AI score0.00285EPSS
SaveExploits1References2
CVE-2023-27214: Improper Neutralization of Special Elements used in an SQL Command
Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php...
9.8CVSS5.8AI score0.00788EPSS
SaveExploits1References2
20