Lucene search
K

15 matches found

Vulnrichment
Vulnrichment
added 2026/03/20 6:2 a.m.2 views

CVE-2026-4474 itsourcecode University Management System admin_single_student_update.php cross site scripting

A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /adminsinglestudentupdate.php. This manipulation of the argument stname causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be...

4.8CVSS4.2AI score0.00271EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/08 6:32 p.m.34 views

CVE-2026-3760 itsourcecode University Management System view_result.php sql injection

A vulnerability was detected in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /viewresult.php. Performing a manipulation of the argument seme results in sql injection. The attack is possible to be carried out remotely. The exploit is now public...

7.5CVSS0.00389EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.5 views

itsourcecode University Management System SQL注入漏洞

itsourcecode University Management System is an open-source university management system developed by itsourcecode. Version 1.0 of itsourcecode University Management System has a SQL injection vulnerability. This vulnerability arises from manipulating the parameters in the file...

9.8CVSS7.2AI score0.0033EPSS
Exploits1References6
CVE
CVE
added 2026/03/02 6:2 a.m.9 views

CVE-2026-3413

CVE-2026-3413 affects itsourcecode University Management System 1.0. The vulnerability is in the /admin_single_student.php (also noted as /admin single student.php) code path where manipulating the ID argument allows SQL injection. Access is described as remote, and exploits have been published. ...

9.8CVSS6.9AI score0.00393EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2026/03/02 5:2 a.m.10 views

CVE-2026-3411

The CVE-2026-3411 entry concerns itsourcecode University Management System 1.0. The vulnerability is a SQL injection in the /admin_single_student_update.php function, exploitable by manipulating the ID parameter. Remote exploitation is possible, and public exploits have been disclosed. According ...

9.8CVSS6.8AI score0.00333EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-47938

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00545EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/05/23 6:23 a.m.9 views

CVE-2024-6958

A vulnerability classified as critical was found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /stupdate.php of the component Avatar File Handler. The manipulation of the argument personalimage leads to unrestricted upload. The attack can be...

8.8CVSS7.2AI score0.00634EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 3:7 a.m.11 views

CVE-2024-6957

A vulnerability classified as critical has been found in itsourcecode University Management System 1.0. This affects an unknown part of the file functions.php of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS7.5AI score0.00698EPSS
Exploits1References1
OSV
OSV
added 2024/07/21 3:15 p.m.5 views

CVE-2024-6957

A vulnerability classified as critical has been found in itsourcecode University Management System 1.0. This affects an unknown part of the file functions.php of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS5.7AI score0.00698EPSS
Exploits1References4
NVD
NVD
added 2024/07/21 3:15 p.m.31 views

CVE-2024-6957

A vulnerability classified as critical has been found in itsourcecode University Management System 1.0. This affects an unknown part of the file functions.php of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS0.00698EPSS
Exploits1References4
NVD
NVD
added 2024/07/21 3:15 p.m.29 views

CVE-2024-6958

A vulnerability classified as critical was found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /stupdate.php of the component Avatar File Handler. The manipulation of the argument personalimage leads to unrestricted upload. The attack can be...

8.8CVSS0.00634EPSS
Exploits1References4
NVD
NVD
added 2024/07/21 2:15 p.m.24 views

CVE-2024-6956

A vulnerability was found in itsourcecode University Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /viewcgpa.php. The manipulation of the argument VR/VN leads to sql injection. The attack may be launched remotely. The exploi...

7.2CVSS0.00587EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/07/21 2:0 p.m.20 views

CVE-2024-6956 itsourcecode University Management System view_cgpa.php sql injection

A vulnerability was found in itsourcecode University Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /viewcgpa.php. The manipulation of the argument VR/VN leads to sql injection. The attack may be launched remotely. The exploi...

6.5CVSS7.3AI score0.00587EPSS
Exploits1References4
CVE
CVE
added 2024/07/21 11:31 a.m.49 views

CVE-2024-6952

CVE-2024-6952 affects itsourcecode University Management System 1.0. The vulnerability is in the file /view_single_result.php?vr=123321&vn=mirage, where manipulation of the seme argument leads to SQL injection. Reports indicate the issue is exploitable remotely and the exploit has been disclosed ...

8.8CVSS6.9AI score0.00545EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/21 12:0 a.m.5 views

PT-2024-37995 · Unknown · Itsourcecode University Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode University Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /view cgpa.php. The manipulation of the argument VR/VN leads to sql injection. The attack may be launched...

7.2CVSS7.6AI score0.00587EPSS
Exploits1References7
Rows per page
Query Builder