EUVD-2024-39688

Malicious code in bioql PyPI...

CVE-2024-42572

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...

Art Gallery Management System manage-art-medium.php File SQL Injection Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter artmed in the file /admin/manage-art-medium.php. An attacke...

CVE-2024-42573

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php...

CVE-2024-42572

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...

CVE-2024-42572

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...

CVE-2024-42575

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php...

CVE-2024-42575

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php...

CVE-2024-42571

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php...

CVE-2024-42569

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php...

CVE-2024-42569

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php...

CVE-2024-42571

The CVE-2024-42571 entry concerns School Management System and identifies a SQL injection vulnerability in the insertattendance.php endpoint, exploitable via the medium parameter. Root cause as described: unsanitized input passed to SQL queries in insertattendance.php leading to potential disclos...

PT-2024-30029 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. It occurs via the medium parameter at the "paidclass.php" endpoint. There is no information provided about the...

CVE-2024-42571

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php...

PT-2024-30031 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was found in the School Management System via the medium parameter at the "admininsert.php" endpoint. This allows for potential exploitation. No...

CVE-2024-42572

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...

CVE-2024-42575

CVE-2024-42575 affects School Management System. A SQL injection flaw is present in the substaff.php endpoint, exploitable via the medium parameter. CVSS v3.1 metrics indicate a Base Score of 9.8 (CRITICAL) with Network attack vector, Low attack complexity, no privileges required, no user interac...

CVE-2024-42574

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php...

School-Management-System 安全漏洞

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the insertattendance.php page...

PT-2024-30032 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the medium parameter at the "insertattendance.php" endpoint. Recommendations:...