PT-2021-16970

Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description The issue allows remote attackers to execute arbitrary SQL statements via the id parameter to "edit stud.php". This enables attackers to manipulate database queries,...

PT-2021-16967

Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the id parameter to the "edit user.php" endpoint. Recommendations For...

CVE-2021-27332: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the classname parameter to updateclass.php...

PT-2021-16968

Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the student information parameters to the "edit stud.php" endpoint. Th...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2021-47136)

Waychar is a free, full-featured open enrollment system. The Waychar enrollment system suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Waychar Enrollment System (CNVD-2021-47132)

Waychar is a free, full-featured open enrollment system. The Waychar enrollment system suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...

CVE-2021-27129

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...

Cross site scripting

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...

CVE-2021-27129

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...

CVE-2021-27129

The CVE-2021-27129 entry concerns the CASAP Automated Enrollment System version 1.0, which has a cross-site scripting (XSS) vulnerability via the Students > Edit > ROUTE parameter. The affected component is the web application; the root cause is input handling of the ROUTE parameter leading...

PT-2021-17253

Name of the Vulnerable Software and Affected Versions: CASAP Automated Enrollment System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited through the ROUTE parameter, which is accessible via the Students Edit path...

CVE-2021-27129: Improper Neutralization of Input During Web Page Generation

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2021-24448)

Waychar Registration System is an online registration system developed for sporting events and other general purpose activities. A logic flaw vulnerability exists in the Waychar registration system. An attacker could exploit the vulnerability to obtain sensitive information from the database...

CASAP Automated Enrollment System 1.1 SQL Injection

Exploit Title: CASAP Automated Enrollment System 1.1 - Authentication Bypass cookie session Exploit Author: @nu11secur1ty Date: 03.02.2021 Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...

CASAP Automated Enrollment System Authentication Bypass (CVE-2021-26201)

An authentication bypass vulnerability exists in CASAP Automated Enrollment System. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

CASAP Automated Enrollment System 1.0 Cross Site Scripting

Exploit Title: CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS Author: nu11secur1ty Date: 02.15.2021 Vendor: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Athor: https://www.sourcecodester.com/users/yna-ecole Link:...

CVE-2021-26201

The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL query in the username field of the login page...

Sql injection

The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL query in the username field of the login page...

CVE-2021-26201

The CVE-2021-26201 issue affects the CASAP Automated Enrollment System (CASAP) Login Panel, with an authentication bypass achieved via SQL injection in the username field. The vulnerability is documented for CASAP versions around 1.0 (and references to 1.1 in exploit materials), enabling an attac...

PT-2021-16964

Name of the Vulnerable Software and Affected Versions CASAP Automated Enrollment System version 1.0 Description The issue concerns the Login Panel of the system, which is susceptible to SQL injection. This allows an attacker to bypass authentication and gain access to the admin panel by injecting...