CVE-2022-32378

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacherprofile.php?myindex=...

CVE-2022-32380

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getstudentsubject.php?index=...

CVE-2022-32377

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getexamtimetable.php?id=...

CVE-2022-32375

CVE-2022-32375 affects itsourcecode Advanced School Management System v1.0. The vulnerability is a SQL Injection flaw in /school/model/get_timetable.php?id=, caused by improper input handling, enabling potential unauthorized access to or manipulation of database data. The CVSS scores indicate hig...

PT-2022-21271

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the "/school/model/get subject.php?id=" endpoint. This allows for potential manipulation of database queries. No information is provide...

PT-2022-21274

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the /school/model/get timetable.php endpoint, specifically through the id parameter. This allows for potential unauthorized access to...

PT-2022-21278

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for SQL Injection, which can be exploited via the "/school/model/get parents profile.php" API endpoint, specifically through the my index variable. This...

PT-2022-21276

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /school/model/get exam timetable.php endpoint, specifically through the id parameter...

PT-2022-21277

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/school/model/get teacher profile.php" API endpoint, specifically through the my index variable. This allo...

PT-2022-21269

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /school/model/get classroom.php?id= endpoint. The id parameter is vulnerable to SQL injection attacks...

PT-2022-21280

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for SQL Injection via the "/school/model/get admin profile.php" API endpoint, specifically through the my index variable. This could potentially lead to...

PT-2022-21275

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /school/model/get events.php endpoint, specifically through the event id parameter. Recommendations Fo...

PT-2022-21272

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "/school/model/get exam.php" API endpoint, specifically through the id variable. No information is provid...

PT-2022-21270

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /school/model/get teacher.php endpoint, specifically through the id parameter. Recommendations F...

PT-2022-21279

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for SQL Injection via the "/school/model/get student subject.php?index=" API endpoint, specifically through the index parameter. This could potentially lea...

PT-2022-21267

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the /school/model/get grade.php endpoint, specifically through the id parameter. This allows for potential unauthorized access and...

PT-2022-21319

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for arbitrary code execution via the "ip/school/view/all teacher.php" API endpoint. Recommendations For itsourcecode Advanced School Management System...

PT-2022-21273

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /school/model/get subject routing.php endpoint, specifically through the id parameter. Recommendations...