Lucene search
+L

7 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/13 12:00 a.m.•10 views

CVE-2026-12175: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is...

5.8CVSS5.5AI score0.00214EPSS
SaveExploits0References3
NVD
NVD
•added 2025/08/07 6:15 p.m.•19 views

CVE-2023-41522

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...

8.8CVSS0.0032EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/08/07 12:00 a.m.•26 views

CVE-2023-41522

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...

0.0032EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/08/07 12:00 a.m.•10 views

CVE-2023-41522

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...

5.9AI score0.0032EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/07 12:00 a.m.•20 views

PT-2025-32290 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createStudents.php file. The Id, firstname, and admissionNumber parameters are...

8.8CVSS5.9AI score0.0032EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/07 12:00 a.m.•8 views

CVE-2023-41522: Improper Neutralization of Special Elements used in an SQL Command

Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...

8.8CVSS5.9AI score0.0032EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/07 12:00 a.m.•41 views

CVE-2023-41522

The Student Attendance Management System v1 is vulnerable to multiple SQL injection flaws located in the createStudents.php file. The root cause is the incorrect manipulation and lack of sanitization for the Id , firstname , and admissionNumber parameters. These vulnerabilities could allow an att...

8.8CVSS5.9AI score0.0032EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder