CVE-2024-41241

A Reflected Cross Site Scripting XSS vulnerability was found in " /smsa/adminlogin.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...

CVE-2024-6374

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as problematic. This issue affects some unknown processing of the file /subject.php of the component Subject Page. The manipulation of the argument Subject Title/Sybillus Details leads to cross site...

CVE-2024-6374

CVE-2024-6374 affects lahirudanushka School Management System 1.0.0/1.0.1. The vulnerability is a stored XSS in the Subject Page’s /subject.php, triggered by manipulating the Subject Title/Sybillus Details parameters. The issue is exploitable remotely and the exploit has been disclosed publicly. ...

CVE-2024-6374 lahirudanushka School Management System Subject Page subject.php cross site scripting

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as problematic. This issue affects some unknown processing of the file /subject.php of the component Subject Page. The manipulation of the argument Subject Title/Sybillus Details leads to cross site...

PT-2024-37578

Name of the Vulnerable Software and Affected Versions lahirudanushka School Management System versions 1.0.0 through 1.0.1 Description A vulnerability was found in the lahirudanushka School Management System, affecting some unknown processing of the file /subject.php of the component Subject Page...

CVE-2024-6374: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as problematic. This issue affects some unknown processing of the file /subject.php of the component Subject Page. The manipulation of the argument Subject Title/Sybillus Details leads to cross site...

School-Management-System Cross-Site Scripting Vulnerability

School-Management-System is a school management system by the individual developer Lahiru Danushka. A cross-site scripting vulnerability exists in School-Management-System, which stems from a cross-site scripting vulnerability in the Sybillus parameter of the /subject.php file...

CVE-2024-6277

A vulnerability, which was classified as critical, was found in lahirudanushka School Management System 1.0.0/1.0.1. Affected is an unknown function of the file student.php of the component Student Page. The manipulation of the argument update leads to sql injection. It is possible to launch the...

CVE-2024-6278

A vulnerability has been found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file subject.php of the component Subject Page. The manipulation of the argument update leads to sql injection. The...

CVE-2024-6279

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file examresults-par.php of the component Exam Results Page. The manipulation of the argument sid leads to sql injection. The...

CVE-2024-6279

The CVE-2024-6279 issue affects lahirudanushka School Management System v1.0.0–v1.0.1, in the Exam Results Page’s file examresults-par.php. The root cause is a SQL injection triggered by manipulating the sid argument, allowing remotely executable exploits. Publicly disclosed exploitation vectors ...

CVE-2024-6279 lahirudanushka School Management System Exam Results Page examresults-par.php sql injection

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file examresults-par.php of the component Exam Results Page. The manipulation of the argument sid leads to sql injection. The...

CVE-2024-6279 lahirudanushka School Management System Exam Results Page examresults-par.php sql injection

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file examresults-par.php of the component Exam Results Page. The manipulation of the argument sid leads to sql injection. The...

CVE-2024-6278 lahirudanushka School Management System Subject Page subject.php sql injection

A vulnerability has been found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file subject.php of the component Subject Page. The manipulation of the argument update leads to sql injection. The...

CVE-2024-6278 lahirudanushka School Management System Subject Page subject.php sql injection

A vulnerability has been found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file subject.php of the component Subject Page. The manipulation of the argument update leads to sql injection. The...

CVE-2024-6278

CVE-2024-6278 affects lahirudanushka School Management System (versions 1.0.0–1.0.1). The vulnerability exists in Subject Page’s subject.php, where manipulating the update parameter leads to SQL injection. Exploitation can be performed remotely, and the vulnerability has been publicly disclosed. ...

CVE-2024-6278 lahirudanushka School Management System Subject Page subject.php sql injection

A vulnerability has been found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file subject.php of the component Subject Page. The manipulation of the argument update leads to sql injection. The...

CVE-2024-6276

A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1. This issue affects some unknown processing of the file teacher.php of the component Teacher Page. The manipulation of the argument update leads to sql injection. The attack ma...

CVE-2024-6274

A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affects an unknown part of the file /attendancelist.php of the component Attendance Report Page. The manipulation of the argument aid leads to sql injection. It is possible to initia...

CVE-2024-6277

The CVE-2024-6277 entry relates to lahirudanushka School Management System 1.0.0/1.0.1, affecting the Student Page’s student.php with an SQL injection vulnerability in the handling of the update parameter. Exploitation is possible remotely, and multiple connected sources consistently describe a S...