EUVD-2025-6657

Malicious code in bioql PyPI...

StudentManage security vulnerability

StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Course module and may lead to cross-site scripting attacks...

CVE-2025-2351

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351 DayCloud StudentManage Login Endpoint adminScoreUrl sql injection

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351 DayCloud StudentManage Login Endpoint adminScoreUrl sql injection

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351

DayCloud StudentManage 1.0 is affected by an SQL injection in the login endpoint, specifically the /admin/adminScoreUrl file. The vulnerability results from unsafely handling an argument query, allowing remote exploitation without user interaction. No version details are provided for affected or ...

CVE-2025-2351: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

DayCloud StudentManage injection vulnerability

DayCloud StudentManage is a student management system for DayCloud individual developers. An injection vulnerability exists in DayCloud StudentManage version 1.0, which stems from SQL injection and could lead to a remote attack...

PT-2025-11444

Name of the Vulnerable Software and Affected Versions: DayCloud StudentManage version 1.0 Description: A critical vulnerability was found in DayCloud StudentManage, affecting the /admin/adminScoreUrl file of the Login Endpoint component. The manipulation of the query argument leads to SQL...