CVE-2026-37750

CVE-2026-37750 — School Management System 1.0 - Reflected XSS Details Field| Info ---|--- CVE ID| CVE-2026-37750 Type| Reflected Cross-Site Scripting XSS Severity| Medium CVSSv3: 6.1 Vendor| mahmoudai1 Product| School Management System Version| 1.0 Discoverer| Varad AP Mene Date| 2026-04-16 CWE|...

CVE-2024-33911

The School Management 10.3.4 - Post-Authenticated SQL Injection Exploit Title: The School Management 10.3.4 - Post-Authenticated SQL Injection Date: 29 April, 2024 Exploit Author: Ivan Spiridonov xbz0n Vendor Homepage: https://theschool-management.com Version: 10.3.4 Tested on: Ubuntu 22.04 CVE:...

CVE-2025-25964

CVE-2025-25964: SQL Injection in School Information Management System v1.0 Introduction In today's digital landscape, SQL Injection SQLi remains one of the most common and dangerous vulnerabilities found in web applications. This blog post discusses a critical SQL Injection vulnerability...

CVE-2025-46204

Description Unifiedtransform v2.0 is vulnerable to Incorrect Access Control. Any user students and teachers can access and modify course details via the /course/edit/id endpoints. This functionality intended exclusively for administrative use. Exploiting this flaw allows unauthorized manipulation...

CVE-2026-124502

A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3. Affected by this vulnerability is the function GraduationController::resetGraduation of the file app/Http/Controllers/GraduationController.php of the component Delete Handler. Such manipulation of t...

CVE-2026-124502

The yungifez Skuul School Management System (versions up to 2.6.3 ) is vulnerable to a remote missing authorization flaw in the Delete Handler component. Specifically, the GraduationController::resetGraduation function within app/Http/Controllers/GraduationController.php fails to properly authori...

CVE-2026-124502 yungifez Skuul School Management System Delete GraduationController.php resetGraduation authorization

A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3. Affected by this vulnerability is the function GraduationController::resetGraduation of the file app/Http/Controllers/GraduationController.php of the component Delete Handler. Such manipulation of t...

EUVD-2026-119759

A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3. Affected by this vulnerability is the function GraduationController::resetGraduation of the file app/Http/Controllers/GraduationController.php of the component Delete Handler. Such manipulation of t...

CVE-2026-124502 yungifez Skuul School Management System Delete GraduationController.php resetGraduation authorization

A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3. Affected by this vulnerability is the function GraduationController::resetGraduation of the file app/Http/Controllers/GraduationController.php of the component Delete Handler. Such manipulation of t...

PT-2026-140161

A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3. Affected by this vulnerability is the function GraduationController::resetGraduation of the file app/Http/Controllers/GraduationController.php of the component Delete Handler. Such manipulation of t...

CVE-2026-124502: yungifez Skuul School Management System: A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3

A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3. Affected by this vulnerability is the function GraduationController::resetGraduation of the file app/Http/Controllers/GraduationController.php of the component Delete Handler. Such manipulation of t...

EUVD-2026-116528

A flaw has been found in sumiie24 School-Management-System up to d946d649c7c95e101fc5679ecd91999533bb10d7. Affected by this issue is some unknown functionality of the file parentLogin.php of the component Public Search Feature. Executing a manipulation of the argument email can lead to sql...

CVE-2026-121524

A flaw has been found in sumiie24 School-Management-System up to d946d649c7c95e101fc5679ecd91999533bb10d7. Affected by this issue is some unknown functionality of the file parentLogin.php of the component Public Search Feature. Executing a manipulation of the argument email can lead to sql...

CVE-2026-121524

The sumiie24 School-Management-System is vulnerable to a remote SQL injection flaw within the Public Search Feature component, specifically affecting the parent_Login.php file (up to commit d946d649c7c95e101fc5679ecd91999533bb10d7). An attacker can manipulate the email argument to execute arbitra...

CVE-2026-121524 sumiie24 School-Management-System Public Search Feature parent_Login.php sql injection

A flaw has been found in sumiie24 School-Management-System up to d946d649c7c95e101fc5679ecd91999533bb10d7. Affected by this issue is some unknown functionality of the file parentLogin.php of the component Public Search Feature. Executing a manipulation of the argument email can lead to sql...

CVE-2026-121524: sumiie24 School-Management-System: A flaw has been found in sumiie24 School-Management-System up to d946d649c7c95e101fc5679ecd91999533bb10d7

A flaw has been found in sumiie24 School-Management-System up to d946d649c7c95e101fc5679ecd91999533bb10d7. Affected by this issue is some unknown functionality of the file parentLogin.php of the component Public Search Feature. Executing a manipulation of the argument email can lead to sql...

CVE-2026-117028

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate the studentId parameter to retrieve another student's examination results, including examination marks, without...

PT-2026-133560

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate the studentId parameter to retrieve another student's examination results, including examination marks, without...

CVE-2026-117028

The Skuul School Management System (through version 2.6.5 ) contains an incorrect access control vulnerability in the ResultChecker::checkResult method. An authenticated student can exploit this by manipulating the studentId parameter to bypass authorization and retrieve the examination results a...

CVE-2026-117028

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate the studentId parameter to retrieve another student's examination results, including examination marks, without...