127 matches found
Online-Admission-System-RCE-PoC
इस रिपॉजिटरी में README नहीं है।...
CVE-2025-8471
CVE-2025-8471 SQL Injection PoC Autor : Byte Reaper CVE : CVE-2025-8471 Schwachstelle : SQL Injection in „projectworlds Online Admission System v1.0“ Beschreibung : In adminlogin.php?aid= existiert eine blinde SQL-Injection. Dieser PoC sendet eine Reihe von GET-Anfragen mit verschiedenen Payloads...
CVE-2026-4625
A flaw has been found in SourceCodester Online Admission System 1.0. This affects an unknown function of the file /programmes.php. Executing a manipulation of the argument program can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2026-4625
A flaw has been found in SourceCodester Online Admission System 1.0. This affects an unknown function of the file /programmes.php. Executing a manipulation of the argument program can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2026-4625
A flaw has been found in SourceCodester Online Admission System 1.0. This affects an unknown function of the file /programmes.php. Executing a manipulation of the argument program can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2026-4625 SourceCodester Online Admission System programmes.php sql injection
A flaw has been found in SourceCodester Online Admission System 1.0. This affects an unknown function of the file /programmes.php. Executing a manipulation of the argument program can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2026-4625
SourceCodester Online Admission System 1.0 includes a SQL injection vulnerability in /programmes.php, triggered by manipulating the program argument. The flaw is exploitable remotely, with a published exploit. Multiple sources attribute the issue to an unknown function in the file, leading to pot...
PT-2026-27307
Name of the Vulnerable Software and Affected Versions SourceCodester Online Admission System version 1.0 Description A flaw exists in SourceCodester Online Admission System 1.0. The issue affects an unknown function within the /programmes.php file. Manipulating the program argument can lead to SQ...
SourceCodester Online Admission System SQL注入漏洞
The SourceCodester Online Admission System is an open-source online admission system developed by SourceCodester. Version 1.0 of the SourceCodester Online Admission System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the program parameter in the...
📄 Online Admission Software 2.6 SQL Injection
Online Admission Software version 2.6 suffers from a remote SQL injection vulnerability. ============================================================================================================================================= | Title : Online Admission Software 2.6 SQL injection Vulnerabilit...
CVE-2026-2172
A vulnerability was determined in code-projects Online Application System for Admission 1.0. Affected by this vulnerability is an unknown functionality of the file enrollment/index.php of the component Login Endpoint. Executing a manipulation can lead to sql injection. The attack can be launched...
📄 Online Admission Software 2.6 Insecure Direct Object Reference
Online Admission Software version 2.6 suffers from an insecure direct object reference vulnerability. ============================================================================================================================================= | Title : Online Admission Software 2.6 IDOR...
CVE-2025-12938
A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /processlogin.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly...
CVE-2025-41107
Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...
CVE-2025-12938
A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /processlogin.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly...
EUVD-2025-44044
A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /processlogin.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly...
CVE-2025-12938 projectworlds Online Admission System process_login.php sql injection
A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /processlogin.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly...
CVE-2025-12938
Summary: CVE-2025-12938 affects projectworlds Online Admission System 1.0. Affected component: file /process_login.php, where manipulation of the keywords parameter enables a SQL injection. The vulnerability is remote, with a publicly available exploit noted in the sources. Multiple feeds corrobo...
CVE-2025-12938 projectworlds Online Admission System process_login.php sql injection
A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /processlogin.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly...
CVE-2025-41107
Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...