65 matches found
CVE-2023-2814
SourceCodester Class Scheduling System 1.0 contains a cross-site scripting vulnerability in the POST Parameter Handler, specifically via the Academic_Rank parameter in /admin/save_teacher.php. The flaw arises from insufficient input filtering/escaping, allowing remote attackers to inject arbitrar...
PT-2023-21588 · Sourcecodester · Sourcecodester Class Scheduling System
Name of the Vulnerable Software and Affected Versions: SourceCodester Class Scheduling System version 1.0 Description: A problematic vulnerability has been found in the SourceCodester Class Scheduling System. The issue affects an unknown function of the file /admin/save teacher.php, specifically...
SourceCodester Class Scheduling System 跨站脚本漏洞
Class Scheduling System is a class scheduling system. A cross-site scripting vulnerability exists in Class Scheduling System v1.0, which originates from the lack of effective filtering and escaping of user-supplied data in the AcademicRank parameter of the file /admin/saveteacher.php in the...
CVE-2022-2706
A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/classsched.php. The manipulation of the argument class with the input '||SELECT 0x684d6b6c WHERE 5993=5993 AND SELECT 2096...
Sql injection
A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/classsched.php. The manipulation of the argument class with the input '||SELECT 0x684d6b6c WHERE 5993=5993 AND SELECT 2096...