Cross site scripting

A vulnerability was found in SourceCodester Simple Student Information System 1.0. It has been classified as problematic. This affects an unknown part of the file /classes/Master.php?f=savecourse of the component Add New Course. The manipulation of the argument name with the input...

CVE-2023-2425 SourceCodester Simple Student Information System Add New Course cross site scripting

A vulnerability was found in SourceCodester Simple Student Information System 1.0. It has been classified as problematic. This affects an unknown part of the file /classes/Master.php?f=savecourse of the component Add New Course. The manipulation of the argument name with the input...

CVE-2023-2425

CVE-2023-2425 affects SourceCodester Simple Student Information System 1.0. the vulnerability is a cross-site scripting in the Add New Course feature, specifically the /classes/Master.php?f=save_course endpoint. The input parameter name (and examples like ) can be manipulated to inject script, ex...

PT-2023-19498 · Sourcecodester · Sourcecodester Simple Student Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Information System version 1.0 Description: A problematic issue was found in the system, affecting the /classes/Master.php?f=save course component of the Add New Course feature. The manipulation of the name...

Simple Student Information System 跨站脚本漏洞

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can be used to help a university or college manage student information and academic records. A cross-site scripting vulnerability exists in Simple Student Information System version...

CVE-2022-39989

An issue was discovered in Fighting Cock Information System 1.0, which uses default credentials, but does not force nor prompt the administrators to change the credentials...

PT-2023-13737 · Unknown · Fighting Cock Information System

Name of the Vulnerable Software and Affected Versions: Fighting Cock Information System version 1.0 Description: An issue was discovered in the system, which uses default credentials but does not force nor prompt administrators to change these credentials. Recommendations: For Fighting Cock...

CVE-2022-39989

An issue was discovered in Fighting Cock Information System 1.0, which uses default credentials, but does not force nor prompt the administrators to change the credentials...

CVE-2022-39989

CVE-2022-39989 affects Fighting Cock Information System 1.0. The root cause is the use of default credentials that administrators are not forced or prompted to change, leading to a high-severity risk (CVSS v3.1: 9.8, CRITICAL) with potential impacts to confidentiality, integrity, and availability...

CVE-2021-44197

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in UBIT Information Technologies Student Information Management System.This issue affects Student Information Management System: before 20211126...

UBIT Student Information Management System 跨站脚本漏洞

UBIT Student Information Management System is a student management system from UBIT. A security vulnerability exists in UBIT Student Information Management System prior to version 20211126, which is an XSS vulnerability that stems from improperly neutralizing HTML-related tags in web pages...

PT-2023-12532 · Ubit Information Technologies · Ubit Information Technologies Student Information Management System

Name of the Vulnerable Software and Affected Versions: UBIT Information Technologies Student Information Management System versions before 20211126 Description: The issue is related to Improper Neutralization of Script-Related HTML Tags in a Web Page, also known as Basic XSS. This allows for...

RosarioSIS 信息泄露漏洞

RosarioSIS is a free and open source student information system. Used to manage students, create reports and make sound decisions. An information disclosure vulnerability exists in RosarioSIS versions prior to 10.8.2. An attacker exploiting this vulnerability could access sensitive information...

SUSE CVE-2014-8959

Directory traversal vulnerability in libraries/gis/GISFactory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allows remote authenticated users to include and execute arbitrary local files via a crafted geometry-type parameter...

SUSE CVE-2018-2573

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: GIS. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

PT-2023-1194 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.31 and prior Description: The issue is related to insufficient input validation in the MySQL Server product, specifically in the Server: GIS component. This allows a high-privileged attacker with network access via...

CVE-2022-2807 SQL Injection in Prens Student Information System

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects Prens Student Information System: before 2.1.11...

CVE-2022-2807

CVE-2022-2807 concerns SQL Injection in the Algan Software Prens Student Information System (SIS). The vulnerability affects versions prior to 2.1.11. The issue enables unauthorized access to database information via injection flaws in the SIS surface (per PT-2022-18792). Remediation is to upgrad...

CVE-2022-2808

CVE-2022-2808 affects the Algan Software Prens Student Information System prior to version 2.1.11. The connected PT-2022-18798 entry clarifies the issue as an Authorization Bypass Through User-Controlled Key vulnerability that enables Object-Relational Mapping Injection and is accompanied by an a...

CVE-2022-2808 IDOR in Prens Student Information System

Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. This issue affects Prens Student Information System: before 2.1.11...