510 matches found
CASAP Automated Enrollment SQL Injection Vulnerability
CASAP Automated Enrollment is an automated enrollment system organized by CASAP USA. The purpose of this project is to provide an automated enrollment system for CASAP to streamline the school process and make it more effective, efficient, and easily retrievable. A SQL injection vulnerability...
CVE-2021-26201: Improper Neutralization of Special Elements used in an SQL Command
The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL query in the username field of the login page...
CVE-2021-3294
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...
CVE-2021-3294
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...
Cross site scripting
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...
CVE-2021-3294
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...
CVE-2021-3294: Improper Neutralization of Input During Web Page Generation
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...
CVE-2021-3294
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...
CVE-2021-3294
CVE-2021-3294 concerns the CASAP Automated Enrollment System 1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) in users.php, arising from insufficient validation of user data in the “First Name” field, enabling an attacker to steal cookies and redirect victims to a malicious site. Pub...
PT-2021-19985
Name of the Vulnerable Software and Affected Versions CASAP Automated Enrollment System version 1.0 Description The issue is related to cross-site scripting XSS in the users.php file. An attacker can exploit this to steal a cookie, which can then be used to redirect a user to a malicious website...
Logic Flaw Vulnerability in Tianyi Online Enrollment System
Tianyi Online Enrollment System is an online enrollment and payment system. A logic flaw vulnerability exists in the Tianyi Online Enrollment System that can be exploited by attackers to compromise confidentiality and integrity...
CASAP-Automated-Enrollment-System
CASAP-Automated-Enrollment-System Exploit Title: CASAP-Au...
CASAP Automated Enrollment System 1.0 Cross Site Scripting
Exploit Title: CASAP ENROLLMENT SYSTEM 1.0 | CROSS SITE SCRIPTING Exploit Author: Richard Jones Date: 2021-01/23 Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...
CASAP Automated Enrollment System 1.0 Cross Site Scripting
Exploit Title: CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS Exploit Author: Anita Gaud Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...
PT-2021-3761
Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description The issue is related to a lack of protection for the SQL query structure, allowing remote attackers to execute arbitrary SQL statements. This can impact the...
CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS
Exploit Title: CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS Exploit Author: Anita Gaud Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...
CASAP Automated Enrollment System 1.0 - 'route' Stored XSS
Exploit Title: CASAP Automated Enrollment System 1.0 - 'route' Stored XSS Exploit Author: Richard Jones Date: 2021-01/23 Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...
CASAP Automated Enrollment System 1.0 Authentication Bypass
Exploit Title: CASAP Automated Enrollment System 1.0 - Authentication Bypass Exploit Author: Himanshu Shukla Date: 2021-01-21 Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...
SQL Injection Vulnerability in Zhirui Admission and Enrollment System
Zhi Rui admission and registration system is the positioning of education enrollment development system, specializing in colleges and universities, vocational and technical schools, training colleges and universities and private education, training institutions to develop enrollment and admission...
File upload vulnerability in waychar enrollment system (CNVD-2021-03305)
waychar online registration system, is an online registration system developed for sports events and other general events, supporting public numbers and small programs. A file upload vulnerability exists in the waychar registration system, which can be exploited by attackers to gain control of th...