CVE-2024-42568

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php...

CVE-2024-42570

CVE-2024-42570 affects School Management System with a SQL injection in the admininsert.php endpoint exposed via the medium parameter. Multiple connected sources confirm the issue, including NVD/Red Hat/CVE records and third-party advisories, consistently identifying the vulnerability as a SQL in...

PT-2024-30028 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was discovered in the School Management System, specifically via the transport parameter at the "vehicle.php" endpoint. This allows for potential...

School-Management-System security vulnerabilities

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the dtmarks.php page...

School-Management-System security vulnerabilities

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the paidclass.php page...

CVE-2024-42573

CVE-2024-42573 describes a SQL injection in the School Management System via the medium parameter of dtmarks.php. Affected software: School Management System (commit bae5aa). Impact: high across confidentiality, integrity, and availability; CVSSv3.1 a vector of NETWORK with no privileges and no u...

School-Management-System security vulnerabilities

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the insertattendance.php page...

School-Management-System security vulnerabilities

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the attendance.php page...

School-Management-System security vulnerabilities

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the substaff.php page...

School-Management-System security vulnerabilities

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the admininsert.php page...

School-Management-System security vulnerabilities

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. School-Management-System has a security vulnerability that stems from an SQL injection vulnerability in the sid parameter of the /search.php?action=2 page...

CVE-2024-42571

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php...

CVE-2024-42566

CVE-2024-42566 affects the School Management System. A SQL injection flaw is present in the login.php endpoint, exploitable via the password parameter. Public sources note the vulnerability but do not provide confirmed affected versions or a fix. Impact is described as high/critical in CVE metada...

CVE-2024-42572

CVE-2024-42572 : A SQL injection vulnerability exists in the School Management System via the medium parameter on the endpoint unitmarks.php . Severity is CRITICAL (CVSS v3.1: 9.8) with impact to confidentiality, integrity, and availability. No remediation or fix versions are specified in the pro...

PT-2024-30034 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was found in the School Management System via the medium parameter at "dtmarks.php". This allows for potential exploitation. No information is provide...

PT-2024-30032 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the medium parameter at the "insertattendance.php" endpoint. Recommendations:...

CVE-2024-42574

CVE-2024-42574 affects School Management System (commit bae5aa) with a SQL injection vulnerability exposed via the medium parameter in attendance.php. The vulnerability is described as affecting the server-side query logic, enabling potential disclosure, modification, or tampering of data (confid...

CVE-2024-42569

The School Management System (developed by Jyothi Babu Araja) contains a SQL injection vulnerability in commit bae5aa . The flaw exists in the medium parameter at the paidclass.php endpoint. This vulnerability allows for unauthorized database interaction due to improper neutralization of special ...

PT-2024-30029 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. It occurs via the medium parameter at the "paidclass.php" endpoint. There is no information provided about the...

CVE-2024-42567

CVE-2024-42567 is a SQL injection vulnerability in the School Management System identified on commit bae5aa, exploitable via the sid parameter at /search.php?action=2. The issue affects the system with network-based access, no authentication/UI interaction required, and has a CVSS v3.1 base score...