Lucene search
K

18 matches found

NVD
NVD
added 2026/02/22 10:15 a.m.6 views

CVE-2026-2939

A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /addstudent/ of the component Add Student Module. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4.8CVSS0.00064EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2026/02/06 10:2 a.m.2 views

CVE-2026-2014

A security flaw has been discovered in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /ramonsys/billing/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS5.3AI score0.00013EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2026/02/06 9:32 a.m.8 views

CVE-2026-2013

CVE-2026-2013 affects itsourcecode Student Management System 1.0. Vulnerable component: /ramonsys/soa/index.php; flaw involves manipulating the ID parameter to trigger SQL injection. Attack can be launched remotely; exploit publicly available. CVSS metrics indicate high/critical impact (up to 9.8...

9.8CVSS7.2AI score0.00013EPSS
Exploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/06 9:2 a.m.3 views

CVE-2026-2012

A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /ramonsys/facultyloading/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly...

7.5CVSS5.3AI score0.00039EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/06 8:32 a.m.1 views

CVE-2026-2011 itsourcecode Student Management System controller.php sql injection

A vulnerability was found in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /ramonsys/enrollment/controller.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public...

7.5CVSS5.3AI score0.00039EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/01/31 9:14 p.m.3 views

CVE-2026-1701

A security vulnerability has been detected in itsourcecode School Management System 1.0. This issue affects some unknown processing of the file /enrollment/index.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS7.2AI score0.00018EPSS
Exploits1References1
NVD
NVD
added 2026/01/30 6:15 p.m.5 views

CVE-2026-1701

A security vulnerability has been detected in itsourcecode School Management System 1.0. This issue affects some unknown processing of the file /enrollment/index.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS0.00018EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/30 5:32 p.m.5 views

CVE-2026-1701

A security vulnerability has been detected in itsourcecode School Management System 1.0. This issue affects some unknown processing of the file /enrollment/index.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS7.2AI score0.00018EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.1 views

PT-2025-53685

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A SQL injection issue exists in itsourcecode Student Management System 1.0. Manipulation of the ID argument in the /statistical.php file can lead to SQL injection. The attack can b...

7.5CVSS7.6AI score0.0002EPSS
Exploits1References10
Vulnrichment
Vulnrichment
added 2025/12/14 9:32 a.m.1 views

CVE-2025-14653 itsourcecode Student Management System addrecord.php sql injection

A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

7.5CVSS6.6AI score0.00028EPSS
Exploits1References5
OSV
OSV
added 2025/12/14 4:15 a.m.0 views

CVE-2025-14644

A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /updatesubject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclos...

9.8CVSS5.8AI score
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/12/14 12:0 a.m.2 views

PT-2025-51157

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A SQL injection issue exists due to manipulation of the ID argument in an unknown function of the file '/addrecord.php'. This allows for remote exploitation. The exploit has been...

9.8CVSS7.4AI score0.00028EPSS
Exploits1References12
CVE
CVE
added 2025/12/13 10:2 a.m.6 views

CVE-2025-14588

CVE-2025-14588 affects itsourcecode Student Management System 1.0. The vulnerable component is the file /update_program.php , where manipulation of the argument ID leads to a SQL injection . Exploitation is possible remotely, and public exploits have been released. The NVD/CNA metrics indicate hi...

9.8CVSS7.3AI score0.00028EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/09 7:2 p.m.1 views

CVE-2025-14336 itsourcecode Student Management System promote.php sql injection

A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and...

7.5CVSS6.8AI score0.00028EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/12/09 6:29 p.m.2 views

CVE-2025-14258

A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newsubject.php. The manipulation of the argument sub leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

9.8CVSS7.1AI score0.00028EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/12/08 9:32 a.m.24 views

CVE-2025-14226 itsourcecode Student Management System edit_user.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

7.5CVSS0.00028EPSS
Exploits1References5
CVE
CVE
added 2024/06/20 2:31 p.m.43 views

CVE-2024-6191

CVE-2024-6191 affects itsourcecode Student Management System 1.0, specifically the Login Page login.php. The vulnerability is a SQL injection caused by unsafely handling the user parameter, exploitable remotely. Public disclosure has occurred. The connected sources discuss remote impact and the n...

9.8CVSS7.8AI score0.00097EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/06/20 2:31 p.m.16 views

CVE-2024-6191 itsourcecode Student Management System Login Page login.php sql injection

A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS0.00097EPSS
Exploits1References4
Rows per page
Query Builder