Online Courseware SQL Injection Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates in the selector parameter of the admin/deactivateteach.php file and can be exploited for SQL injection attacks...

PT-2024-25743 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue has been found in the software, affecting the file admin/deactivatestud.php. The manipulation of the selector argument leads to SQL injection. This issue can be...

Online Courseware SQL Injection Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in Online Courseware version 1.0, which originates from an SQL injection attack on the id parameter of the admin/saveedit.php file...

Online Courseware SQL Injection Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from a SQL injection attack in the contact parameter of the admin/saveditt.php file...

CVE-2024-3419: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/edit.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit ha...

CVE-2024-3420: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Courseware 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/saveedit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

Online Courseware: Cross-site Scripting Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC. A cross-site scripting vulnerability exists in version 1.0 of Online Courseware, which is caused by a cross-site scripting attack in the id parameter of the editt.php file...

CVE-2024-3428: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-3424: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file admin/listscore.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

Online Courseware SQL Injection Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from an SQL injection attack in the title parameter of the admin/listscore.php file...

Online Courseware Security Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC Corporation. A security vulnerability exists in version 1.0 of Online Courseware, which is caused by an SQL injection attack in the selector parameter of the admin/activatestud.php file...

Online Courseware SQL Injection Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from an SQL injection attack on the id parameter of the admin/editt.php file...

CVE-2024-3418: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file admin/deactivateteach.php. The manipulation of the argument selector leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2024-3416: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Online Courseware 1.0. This vulnerability affects unknown code of the file admin/editt.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2024-3426: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Courseware 1.0. Affected by this issue is some unknown functionality of the file editt.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The...

CVE-2024-3422: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Courseware 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/activatestud.php. The manipulation of the argument selector leads to sql injection. The attack can be initiated remotely. The exploit has...

PT-2024-25775 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A problematic issue was found in the file addq.php, where the manipulation of the id argument leads to cross-site scripting. This issue can be initiated remotely. Recommendations: For...

Online Courseware Security Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC Corporation. A security vulnerability exists in Online Courseware version 1.0, which can be exploited for cross-site scripting attacks due to the id parameter in the edit.php file...

PT-2024-25726 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue has been found in the processing of the file admin/saveeditt.php, where the manipulation of the contact argument leads to sql injection. The attack can be initiated...

CVE-2024-3421: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Courseware 1.0. It has been classified as critical. This affects an unknown part of the file admin/deactivatestud.php. The manipulation of the argument selector leads to sql injection. It is possible to initiate the attack remotely. The exploit h...