PT-2022-21319

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for arbitrary code execution via the "ip/school/view/all teacher.php" API endpoint. Recommendations For itsourcecode Advanced School Management System...

PT-2022-21269

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /school/model/get classroom.php?id= endpoint. The id parameter is vulnerable to SQL injection attacks...

PT-2022-21272

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "/school/model/get exam.php" API endpoint, specifically through the id variable. No information is provid...

PT-2022-21280

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for SQL Injection via the "/school/model/get admin profile.php" API endpoint, specifically through the my index variable. This could potentially lead to...

PT-2022-21274

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the /school/model/get timetable.php endpoint, specifically through the id parameter. This allows for potential unauthorized access to...

PT-2022-21277

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/school/model/get teacher profile.php" API endpoint, specifically through the my index variable. This allo...

PT-2022-21279

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for SQL Injection via the "/school/model/get student subject.php?index=" API endpoint, specifically through the index parameter. This could potentially lea...

PT-2022-21267

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the /school/model/get grade.php endpoint, specifically through the id parameter. This allows for potential unauthorized access and...

PT-2022-21273

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /school/model/get subject routing.php endpoint, specifically through the id parameter. Recommendations...

PT-2022-21270

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /school/model/get teacher.php endpoint, specifically through the id parameter. Recommendations F...

PT-2022-21275

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /school/model/get events.php endpoint, specifically through the event id parameter. Recommendations Fo...

PT-2022-21278

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for SQL Injection, which can be exploited via the "/school/model/get parents profile.php" API endpoint, specifically through the my index variable. This...