Lucene search
K

37 matches found

RedhatCVE
RedhatCVE
added 2025/12/20 8:14 p.m.3 views

CVE-2025-14967

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidatesreport.php. The manipulation of the argument schoolyear leads to sql injection. The attack can be initiated remotely. The exploit is...

9.8CVSS7.2AI score0.00028EPSS
Exploits1References1
OSV
OSV
added 2025/12/19 8:15 p.m.0 views

CVE-2025-14967

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidatesreport.php. The manipulation of the argument schoolyear leads to sql injection. The attack can be initiated remotely. The exploit is...

9.8CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/12/19 8:15 p.m.1 views

CVE-2025-14967

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidatesreport.php. The manipulation of the argument schoolyear leads to sql injection. The attack can be initiated remotely. The exploit is...

9.8CVSS0.00028EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/19 7:32 p.m.24 views

CVE-2025-14967 itsourcecode Student Management System candidates_report.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidatesreport.php. The manipulation of the argument schoolyear leads to sql injection. The attack can be initiated remotely. The exploit is...

7.5CVSS0.00028EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/19 7:32 p.m.1 views

CVE-2025-14967 itsourcecode Student Management System candidates_report.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidatesreport.php. The manipulation of the argument schoolyear leads to sql injection. The attack can be initiated remotely. The exploit is...

7.5CVSS6.8AI score0.00028EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/19 12:0 a.m.1 views

itsourcecode Student Management System SQL注入漏洞

itsourcecode Student Management System is an itsourcecode open source student management system. SQL injection vulnerability exists in itsourcecode Student Management System version 1.0, which originates from an unknown function in the file /candidatesreport.php that improperly handles the...

9.8CVSS7.9AI score0.00028EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/12/19 12:0 a.m.1 views

PT-2025-52510

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A flaw exists in itsourcecode Student Management System 1.0 within an unknown functionality of the file /candidates report.php. Manipulation of the school year argument can lead to...

9.8CVSS7.5AI score0.00028EPSS
Exploits1References9
RedhatCVE
RedhatCVE
added 2025/12/10 7:22 p.m.1 views

CVE-2025-14335

A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newschoolyear.php. The manipulation of the argument sy leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS7.1AI score0.00028EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/09 9:31 p.m.2 views

EUVD-2025-202317

A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newschoolyear.php. The manipulation of the argument sy leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS6.6AI score0.00028EPSS
Exploits1References6
OSV
OSV
added 2025/12/09 7:15 p.m.0 views

CVE-2025-14335

A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newschoolyear.php. The manipulation of the argument sy leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.7AI score
Exploits0References5
CVE
CVE
added 2025/12/09 7:2 p.m.9 views

CVE-2025-14335

The CVE-2025-14335 entry concerns itsourcecode Student Management System 1.0. The vulnerability is an SQL injection in the code path handling /new_school_year.php (sy parameter manipulation). It can be exploited remotely and details have been publicly disclosed. Multiple sources (NVD, Red Hat, CV...

9.8CVSS7.3AI score0.00028EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/12/09 7:2 p.m.19 views

CVE-2025-14335 itsourcecode Student Management System new_school_year.php sql injection

A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newschoolyear.php. The manipulation of the argument sy leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS0.00028EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.1 views

PT-2025-50211

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A flaw exists in itsourcecode Student Management System 1.0 related to SQL injection. The issue is located in the file /new school year.php and involves manipulation of the sy...

9.8CVSS7.5AI score0.00028EPSS
Exploits1References8
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.1 views

itsourcecode Student Management System SQL注入漏洞

itsourcecode Student Management System is an open source student management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from a misuse of the parameter sy in the file /newschoolyear.php, which could lead to a...

9.8CVSS7.8AI score0.00028EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-31465

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00046EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/09/29 4:46 p.m.2 views

CVE-2025-11110

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/schoolyear.php. The manipulation of the argument schoolyear results in sql injection. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS7.1AI score0.00046EPSS
Exploits1References1
OSV
OSV
added 2025/09/28 4:15 p.m.0 views

CVE-2025-11110

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/schoolyear.php. The manipulation of the argument schoolyear results in sql injection. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS5.7AI score
Exploits0References5
NVD
NVD
added 2025/09/28 4:15 p.m.2 views

CVE-2025-11110

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/schoolyear.php. The manipulation of the argument schoolyear results in sql injection. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS0.00046EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/09/28 4:2 p.m.7 views

CVE-2025-11110 Campcodes Online Learning Management System school_year.php sql injection

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/schoolyear.php. The manipulation of the argument schoolyear results in sql injection. It is possible to launch the attack remotely. The exploit ha...

7.5CVSS0.00046EPSS
Exploits1References5
CVE
CVE
added 2025/09/28 4:2 p.m.8 views

CVE-2025-11110

CVE-2025-11110 affects Campcodes Online Learning Management System 1.0. The vulnerability is an SQL injection in the /admin/school_year.php file triggered by manipulating the school_year parameter, allowing remote exploitation. Several connected sources confirm exploitation has been publicly rele...

9.8CVSS6.7AI score0.00046EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder