CVE-2024-42573

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php...

CVE-2024-42572

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...

CVE-2024-42569

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php...

CVE-2024-42569

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php...

CVE-2024-42571

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php...

binutils:fuzz_nm: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5201606398771200 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzznm Job Type: centipedeasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x606000019c15 Crash State: bfdgetl16...

CVE-2024-42574

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php...

School-Management-System 安全漏洞

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the insertattendance.php page...

CVE-2024-42571

The School Management System (specifically commit bae5aa ) contains a SQL injection vulnerability. The flaw exists in the medium parameter at the insertattendance.php endpoint. Exploitation of this vulnerability could lead to unauthorized database access or manipulation. No specific fix or newer ...

PT-2024-30032 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the medium parameter at the "insertattendance.php" endpoint. Recommendations:...

CVE-2024-42569

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php...

CVE-2024-42575

CVE-2024-42575 affects School Management System. A SQL injection flaw is present in the substaff.php endpoint, exploitable via the medium parameter. CVSS v3.1 metrics indicate a Base Score of 9.8 (CRITICAL) with Network attack vector, Low attack complexity, no privileges required, no user interac...

CVE-2024-42572

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...

CVE-2024-42571

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php...

WordPress GiveWP Plugin <= 3.13.0 is vulnerable to Broken Access Control

Software GiveWP Type Plugin Vulnerable versions = 3.13.0 Fixed in 3.14.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5940 Patch priority Medium CVSS severity Medium 6.5 Developer Liquid Web / StellarWP PSID c733c510d1d3 Credits villu164 Required...

PT-2024-30029 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. It occurs via the medium parameter at the "paidclass.php" endpoint. There is no information provided about the...

CVE-2024-42575: Improper Neutralization of Special Elements used in an SQL Command

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php...

CVE-2024-42574: Improper Neutralization of Special Elements used in an SQL Command

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php...

CVE-2024-42571: Improper Neutralization of Special Elements used in an SQL Command

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php...

CVE-2024-42573: Improper Neutralization of Special Elements used in an SQL Command

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php...