CVE-2022-28025

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=schoolyear...

CVE-2022-28026

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=studentp&id=...

CVE-2022-28026

The CVE-2022-28026 entry describes a SQL injection in Student Grading System v1.0, exploitable via /student-grading-system/rms.php?page=student_p&id=. The issue is caused by unsanitized user input in the parameter, enabling unauthorized SQL commands and potential data exposure. CVSS details from ...

Student Grading System SQL注入漏洞

Student Grading System is a student grading system from Carlo Montero's personal developer. v1.0 of Student Grading System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Student Grading System SQL注入漏洞

Student Grading System is a student grading system by Carlo Montero Personal Developer. Student Grading System v1.0 has a security vulnerability that can be exploited by attackers via /student-grading-system/rms.php?page=schoolyear...

PT-2022-18766

Name of the Vulnerable Software and Affected Versions Student Grading System version 1.0 Description A SQL injection issue was found in the Student Grading System. The issue can be exploited via the "/student-grading-system/rms.php?page=student p&id=" API endpoint, where the id variable is...

PT-2022-18764

Name of the Vulnerable Software and Affected Versions Student Grading System version 1.0 Description A SQL injection issue was found in the Student Grading System. The issue can be exploited via the "/student-grading-system/rms.php?page=grade" API endpoint. Recommendations For Student Grading...

PT-2022-18765

Name of the Vulnerable Software and Affected Versions Student Grading System version 1.0 Description A SQL injection issue was found in the Student Grading System. The issue can be exploited via the "/student-grading-system/rms.php?page=school year" API endpoint. Recommendations For version 1.0,...

CVE-2022-28025: Improper Neutralization of Special Elements used in an SQL Command

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=schoolyear...

CVE-2022-28026: Improper Neutralization of Special Elements used in an SQL Command

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=studentp&id=...

CVE-2022-28024: Improper Neutralization of Special Elements used in an SQL Command

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade...

Student Grading System SQL注入漏洞

Student Grading System is a student grading system from Carlo Montero's personal developer. v1.0 of Student Grading System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

CVE-2022-27304

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...

CVE-2022-27304

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...

CVE-2022-27304

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...

Sql injection

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...

CVE-2022-27304

The CVE-2022-27304 entry applies to Student Grading System v1.0 and describes a SQL injection vulnerability in the user parameter. The vulnerability is confirmed across multiple connected sources (e.g., NVD, Red Hat and CVE registries) and is documented as a SQLi issue with the affected product. ...

PT-2022-18368

Name of the Vulnerable Software and Affected Versions Student Grading System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the user parameter. Recommendations For version 1.0, consider restricting access to the vulnerable...

Student Grading System SQL注入漏洞

Student Grading System is a student grading system by the individual developer Carlo Montero. Student Grading System v1.0 has a security vulnerability that allows an attacker to perform SQL injection via user parameters...

CVE-2022-27304: Improper Neutralization of Special Elements used in an SQL Command

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...