Lucene search
K

14 matches found

CNNVD
CNNVD
added 2025/12/19 12:0 a.m.1 views

itsourcecode Student Management System SQL注入漏洞

itsourcecode Student Management System is an itsourcecode open source student management system. SQL injection vulnerability exists in itsourcecode Student Management System version 1.0, which originates from an unknown function in the file /candidatesreport.php that improperly handles the...

9.8CVSS7.9AI score0.00028EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/09/29 4:46 p.m.2 views

CVE-2025-11110

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/schoolyear.php. The manipulation of the argument schoolyear results in sql injection. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS7.1AI score0.00046EPSS
Exploits1References1
OSV
OSV
added 2025/09/28 4:15 p.m.0 views

CVE-2025-11110

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/schoolyear.php. The manipulation of the argument schoolyear results in sql injection. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS5.7AI score
Exploits0References5
NVD
NVD
added 2025/09/28 4:15 p.m.2 views

CVE-2025-11110

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/schoolyear.php. The manipulation of the argument schoolyear results in sql injection. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS0.00046EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/09/28 12:0 a.m.3 views

PT-2025-39778

Name of the Vulnerable Software and Affected Versions Campcodes Online Learning Management System version 1.0 Description A security flaw exists in Campcodes Online Learning Management System version 1.0. The issue is related to SQL injection within an unknown function of the file /admin/school...

9.8CVSS7.4AI score0.00046EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2025/05/23 6:34 a.m.3 views

CVE-2024-50825

A SQL Injection vulnerability was found in /admin/schoolyear.php in kashipara E-learning Management System Project 1.0 via the schoolyear parameter...

7.2CVSS7.5AI score0.00144EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.1 views

PT-2024-36444 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System version 1.0 Description: A SQL Injection issue was found in the /search class.php file, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized database access via the school ye...

9.8CVSS9.4AI score0.0148EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.1 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit this vulnerability to gain unauthorized access to the database by executing arbitrary SQL commands via the...

9.8CVSS7.7AI score0.0148EPSS
Exploits1References1
OSV
OSV
added 2024/11/14 6:15 p.m.0 views

CVE-2024-50825

A SQL Injection vulnerability was found in /admin/schoolyear.php in kashipara E-learning Management System Project 1.0 via the schoolyear parameter...

7.2CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2024/11/14 2:15 p.m.0 views

CVE-2024-50842

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/schoolyear.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the schoolyear parameter...

5.4CVSS6AI score0.00634EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.4 views

PT-2024-34441 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A Stored Cross-Site Scripting XSS issue was found in the /admin/school year.php endpoint, specifically via the school year parameter. This allows remote attackers to...

5.4CVSS6.2AI score0.00634EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.1 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System version 1.0, which is caused by an SQL injection in the parameter schoolyear...

7.2CVSS7.8AI score0.00144EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.1 views

Kashipara E-learning Management System 跨站脚本漏洞

Kashipara E-learning Management System is a learning management system from Kashipara Inc. A cross-site scripting vulnerability exists in Kashipara E-learning Management System version 1.0, which is rooted in a stored cross-site scripting attack that allows remote attackers to execute arbitrary...

5.4CVSS6.5AI score0.00634EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/04/21 8:15 p.m.1 views

CVE-2022-28025

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=schoolyear...

9.8CVSS7.3AI score0.00309EPSS
Exploits1References2
Rows per page
Query Builder