CVE-2025-47445-PoC

CVE-2025-47445 PoC यह प्रूफ ऑफ कॉन्सेप्ट एक स्कूल असाइनमेंट पर आधारित है जहाँ हम एक कमजोर वर्डप्रेस प्लगइन ढूंढना चाहते थे और उस कमजोरी का परीक्षण एक स्थानीय नियंत्रित वातावरण में करना चाहते थे।...

CVE-2025-46204

Description Unifiedtransform v2.0 est vulnérable à un contrôle d'accès incorrect. Tout utilisateur étudiants et enseignants peut accéder et modifier les détails des cours via les points de terminaison /course/edit/id. Cette fonctionnalité est destinée exclusivement à un usage administratif...

Snow Crash

Snow Crash Este projeto é uma introdução à segurança de computadores. Snow Crash ajudará você a descobrir a segurança em vários subdomínios, com uma abordagem voltada para desenvolvedores. Você se familiarizará com várias linguagens ASM, Perl, Php, etc., desenvolverá uma certa lógica para entende...

CVE-2024-24142

CVE-2024-24142: School-Task-Manager-System-SQL-Injection-2 KonzeptnachweisPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24142.md KonzeptnachweisPoC : https://github.com/BurakSevben/CVE-2024-24142/blob/main/CVE-2024-24142.md...

CVE-2024-24141

CVE-2024-24141: School-Task-Manager-System-SQLInjection-1 Beweis des KonzeptsPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24141.md Beweis des KonzeptsPoC : https://github.com/BurakSevben/CVE-2024-24141/blob/main/CVE-2024-24141.md...

CVE-2024-33911

The School Management 10.3.4 - SQL Injection post-autenticazione Titolo Exploit: The School Management 10.3.4 - SQL Injection post-autenticazione Data: 29 aprile 2024 Autore dell'exploit: Ivan Spiridonov xbz0n Homepage del vendor: https://theschool-management.com Versione: 10.3.4 Testato su: Ubun...

cve-2019-18634

cve-2019-18634 L'analisi del CVE sopra citato è stato il mio progetto per uno dei miei moduli scolastici. Per l'analisi completa, fare riferimento alla presentazione in questo repository...

CVE-2023-50132

CVE-2023-50132 Descrizione suggerita Sourcecodester School Visitor Log e-book v1.0 è vulnerabile a Cross Site Scripting XSS. Informazioni aggiuntive Link YouTube: https://youtu.be/W7Oen8rs64 Tipo di vulnerabilità Cross Site Scripting XSS Fornitore del prodotto https://www.sourcecodester.com/ Codi...

CVE-2025-25964

CVE-2025-25964: SQL Injection in School Information Management System v1.0 Introduzione Nel panorama digitale odierno, l'SQL Injection SQLi rimane una delle vulnerabilità più comuni e pericolose nelle applicazioni web. Questo post del blog discute una vulnerabilità critica di SQL Injection...

CVE-2022-29359

Sistema di applicazione per club scolastici Problema: Cross-Site Scripting memorizzato non autenticato, iniezione HTML e RCE Autore: Zak Clifford Data: 12.04.2022 Vendor: https://www.sourcecodester.com/php/15266/school-club-application-system-phpoop-free-source-code.html Software:...

School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting

School Dormitory Management System 1.0 contains an authenticated cross-site scripting vulnerability via admin/inc/navigation.php:125. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-bas...

School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting

School Dormitory Management System 1.0 contains an authenticated cross-site scripting vulnerability in admin/inc/navigation.php:126. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-base...

Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting

Open-School 3.0, and Community Edition 2.3, allows cross-site scripting via the osv/index.php?r=students/guardians/create id parameter. id: CVE-2019-14696 info: name: Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting author: pikpikcu severity: medium description: Open-School 3.0, and...

Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

School Dormitory Management System 1.0 - SQL Injection

School Dormitory Management System 1.0 contains a SQL injection vulnerability via accounts/paymenthistory.php:31. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2022-30512 info:...

CVE-2023-51800

CVE-2023-51800 School Fees Management System v1.0 – Mehrere Cross-Site-Scripting XSS Schwachstellen Beschreibung : Mehrere Cross-Site-Scripting XSS Schwachstellen in School Fees Management System v1.0. Verwundbare Produktversion : School Fees Management System v1.0 CVE-Autor : Geraldo Alcântara...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - Vulnerabilidade de Cross-Site Scripting XSS no parâmetro "name" em "addnewparent" Description : Uma vulnerabilidade de cross-site scripting XSS no componente “addnewparent” do School Fees Management System 1.0 permite que atacantes executem...

CVE-2023-49985

CVE-2023-49985 School Fees Management System v1.0 - Vulnerabilità Cross-Site Scripting XSS nel parametro "cname" su "newclass" Descrizione : Una vulnerabilità di cross-site scripting XSS nel componente "newclass" di School Fees Management System v1.0 consente agli attaccanti di eseguire script we...

CVE-2023-49984

CVE-2023-49984 स्कूल फीस प्रबंधन प्रणाली v1.0 - "/management/settings" पर "name" फ़ील्ड/पैरामीटर में क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरी विवरण : School Fees Management System v1.0 के "/management/settings" घटक में एक क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरी हमलावरों को name पैरामीटर में इंजेक्ट किए गए ए...

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - Vulnerabilità Cross-Site Scripting XSS nel campo/parametro "name" su "/management/class" Descrizione : Una vulnerabilità di cross-site scripting XSS nel componente "/management/class" di School Fees Management System v1.0 consente a un attaccant...