1311 matches found
WordPress plugin School Management System 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A code issue vulnerability exists in WordPress plugin...
CVE-2024-9637 School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation
The School Management System – WPSchoolPress plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.10. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it...
Multi Branch School Management System 3.5 Backup Disclosure
============================================================================================================================================= | Title : Multi Branch School Management System 3.5 Backup Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...
CVE-2024-8784
A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users with the input...
CVE-2024-8784
CVE-2024-8784 affects QDocs Smart School Management System 7.0.0, specifically the Chat component at /user/chat/mynewuser. The vulnerability arises from manipulation of the POST parameter users[] that leads to SQL injection (exploitation described as remote). Publicly disclosed exploit exists; im...
CVE-2024-8784 QDocs Smart School Management System Chat mynewuser sql injection
A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users with the input...
CVE-2024-8784 QDocs Smart School Management System Chat mynewuser sql injection
A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users with the input...
akademy 跨站脚本漏洞
akademy is a school management system. A cross-site scripting vulnerability exists in akademy, which stems from an incorrect manipulation of the parameter emailAddress. No details of the vulnerability are provided at this time...
CVE-2024-41236
A SQL injection vulnerability in /smsa/adminlogin.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page...
CVE-2024-41236
CVE-2024-41236 affects Kashipara Responsive School Management System v3.2.0. The vulnerability resides in /smsa/admin_login.php, where the username parameter of the Admin Login Page is susceptible to SQL injection. This allows an attacker to execute arbitrary SQL commands on the backend. Impact d...
CVE-2024-41236
A SQL injection vulnerability in /smsa/adminlogin.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page...
CVE-2024-42575
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php...
CVE-2024-42574
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php...
CVE-2024-42573
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php...
CVE-2024-42573
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php...
CVE-2024-42575
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php...
CVE-2024-42572
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...
CVE-2024-42572
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...