10 matches found
EUVD-2026-35199
A vulnerability was determined in CodeAstro Student Attendance Management System 1.0. Affected is an unknown function of the file /attendance-php/Admin/createClassArms.php. This manipulation of the argument classId causes sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2026-11585: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in CodeAstro Student Attendance Management System 1.0. Affected is an unknown function of the file /attendance-php/Admin/createClassArms.php. This manipulation of the argument classId causes sql injection. The attack can be initiated remotely. The exploit has been...
PT-2026-47452
Name of the Vulnerable Software and Affected Versions CodeAstro Student Attendance Management System version 1.0 Description A SQL injection issue exists in the file '/attendance-php/Admin/createClassArms.php'. This occurs when the classId argument is manipulated, allowing a remote attacker to...
EUVD-2023-46020
Malicious code in bioql PyPI...
CVE-2023-41520
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters...
CVE-2023-41520
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters...
CVE-2023-41520: Improper Neutralization of Special Elements used in an SQL Command
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters...
CVE-2023-41520
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters...
CVE-2023-41520
The Student Attendance Management System v1 contains multiple SQL injection vulnerabilities located in the createClassArms.php file. The root cause is the incorrect manipulation and lack of sanitization of the classId and classArmName parameters when used in SQL queries. Exploitation could allow ...
