7 matches found
CVE-2026-12175: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is...
CVE-2023-41522
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...
CVE-2023-41522
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...
PT-2025-32290 · Unknown · Attendance Management System
Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createStudents.php file. The Id, firstname, and admissionNumber parameters are...
CVE-2023-41522: Improper Neutralization of Special Elements used in an SQL Command
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...
CVE-2023-41522
The Student Attendance Management System v1 is vulnerable to multiple SQL injection flaws located in the createStudents.php file. The root cause is the incorrect manipulation and lack of sanitization for the Id , firstname , and admissionNumber parameters. These vulnerabilities could allow an att...
