Lucene search
K

11 matches found

CNNVD
CNNVD
added 2025/09/18 12:0 a.m.1 views

itsourcecode Student Information Management System SQL注入漏洞

itsourcecode Student Information Management System is itsourcecode open source student information management system. Itsourcecode Student Information Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the wrong operation of the parameter classId in the...

9.8CVSS7.7AI score0.00046EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.3 views

PT-2024-36438 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System version 1.0 Description: A SQL injection issue was found in the /teacher signup.php file, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized access to the database through...

9.8CVSS9.3AI score0.01996EPSS
Exploits1References5
OSV
OSV
added 2024/06/18 7:16 p.m.2 views

CVE-2024-37791

DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?classid...

6CVSS5.8AI score0.02692EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/01/10 12:0 a.m.4 views

PT-2024-15521 · Unknown · Sourcecodester Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Attendance System version 1.0 Description: A critical vulnerability was found in the SourceCodester Student Attendance System. The issue affects an unknown function of the file attendance report.php. The manipulation of...

9.8CVSS8.1AI score0.00308EPSS
Exploits1References7
OSV
OSV
added 2023/12/21 9:15 p.m.1 views

CVE-2023-48716

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'classid' parameter of the addclasses.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2023/12/10 11:15 p.m.3 views

CVE-2023-6658

A vulnerability classified as critical was found in SourceCodester Simple Student Attendance System 1.0. This vulnerability affects unknown code of the file ajax-api.php?action=saveattendance. The manipulation of the argument classid leads to sql injection. The exploit has been disclosed to the...

9.8CVSS5.7AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/12/08 12:0 a.m.3 views

PT-2023-32719 · Sourcecodester · Sourcecodester Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Attendance System version 1.0 Description: A critical issue has been found in the attendance.php file, where the manipulation of the class id argument leads to sql injection. The exploit has been disclosed to the...

9.8CVSS7.5AI score0.00055EPSS
Exploits1References7
CNNVD
CNNVD
added 2022/08/12 12:0 a.m.1 views

Zoo Management System SQL注入漏洞

Zoo Management System is a zoo management system by Carlo Montero, an individual developer. It provides an online and automated platform for zoo organizations to manage their daily records. A SQL injection vulnerability exists in Zoo Management System. An attacker could exploit this vulnerability...

9.8CVSS8.5AI score0.00229EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/04/08 12:0 a.m.1 views

PT-2022-18738 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. It is located at the "/public html/animals" endpoint via the class id parameter. Recommendations: For Zoo Management System version 1.0,...

8.8CVSS8.8AI score0.00316EPSS
Exploits3References5
CNVD
CNVD
added 2016/04/12 12:0 a.m.1 views

Linyi Yifeng Network Technology Service Co., Ltd. website system has SQL injection vulnerabilities

Linyi Yifeng Network Technology Service Co., Ltd. is a comprehensive network technology service company integrating e-commerce service, e-commerce training and e-commerce. SQL injection vulnerability exists in the website building system of Linyi Yifeng Network Technology Service Co. Ltd. Due to...

7.6AI score
Exploits0References1
CNVD
CNVD
added 2015/07/09 12:0 a.m.1 views

SQL Injection Vulnerability in the ClassID Parameter of Guozidian's Asset Management Information System for Administrative Utilities

The Administrative Utility Asset Management Information System is an asset management information system, in order to standardize and strengthen the management of state-owned asset management information system of administrative institutions, and to improve the level of informationization of...

7.7AI score
Exploits0References1
Rows per page
Query Builder