8376 matches found
CVE-2025-50582
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...
CVE-2025-50584
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Teacher module...
CVE-2025-50584
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Teacher module...
PT-2025-30096 · Unknown · Student-Manage
Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS vulnerability within the Add A New Course module. Recommendations: Address the issue in the Add A New Course module for StudentManage version 1.0...
PT-2025-30097 · Unknown · Student-Manage
Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS issue within the Add A New Student module. Recommendations: Address the issue in the Add A New Student module...
StudentManage 安全漏洞
StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Teacher module and could lead to a cross-site scripting attack...
CVE-2025-50584
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Teacher module...
CVE-2025-50584
Product affected: StudentManage v1.0. The issue is a cross-site scripting (XSS) vulnerability in the Add A New Teacher module. Root cause details are not provided beyond the XSS finding. Impact, scope, and exploitability are described in general terms (XSS may affect user input handling); explici...
CVE-2025-50582
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...
CVE-2025-50584
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Teacher module...
StudentManage 安全漏洞
StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Course module and may lead to cross-site scripting attacks...
PT-2025-30091 · Unknown · Student-Manage
Name of the Vulnerable Software and Affected Versions: StudentManage version 1.0 Description: The software contains a cross-site scripting XSS issue via the Add A New Teacher module. Recommendations: Address the issue in the Add A New Teacher module in StudentManage version 1.0...
CVE-2025-50583
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Student module...
CVE-2025-50582
StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...
StudentManage 安全漏洞
StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Student module, and may lead to cross-site scripting attacks...
CVE-2025-34112
An authenticated multi-stage remote code execution vulnerability exists in Riverbed SteelCentral NetProfiler and NetExpress 10.8.7 virtual appliances. A SQL injection vulnerability in the '/api/common/1.0/login' endpoint can be exploited to create a new user account in the appliance database. Thi...
CVE-2025-7610
A vulnerability was found in code-projects Electricity Billing System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/changepassword.php. The manipulation of the argument newpassword leads to sql injection. The attack may be launched remotely...
CVE-2025-7462
A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function pdfferror of the file devices/vector/gdevpdf.c of the component New Output File Open Error Handler. The manipulation leads to null pointer...
CVE-2025-7562
A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /admin/new-requests.php. The manipulation of the argument teamid leads to sql injection. It is possible to launch the attack remotely. The exploit has...
CVE-2025-7562 PHPGurukul Online Fire Reporting System new-requests.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /admin/new-requests.php. The manipulation of the argument teamid leads to sql injection. It is possible to launch the attack remotely. The exploit has...