CVE-2025-28072

PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php...

WordPress plugin Ivy School 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-17254 · Thimpress · Thimpress Ivy School

Name of the Vulnerable Software and Affected Versions: ThimPress Ivy School versions 1.6.0 and earlier Description: The issue is related to a Path Traversal vulnerability, specifically a '.../...//' vulnerability, which allows PHP Local File Inclusion in ThimPress Ivy School. Recommendations: For...

WordPress Ivy School theme <= 1.6.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Ivy School versions = 1.6.0...

CVE-2025-28072

PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php...

Arbitrary File Read Vulnerability in Smart School Management System of Beijing Software Branch of KDDI (Beijing) Co.

Ltd. focuses on the research and development of core artificial intelligence technology and industrialization landing. An arbitrary file read vulnerability exists in the Smart School Management System of Beijing Software Branch of KDDI Beijing Limited, which can be exploited by attackers to obtai...

Edunext Systems + School Management Software 1.0 SQL Injection

Edunext Systems + School Management Software version 1.0 suffers from multiple remote SQL injection vulnerabilities. Exploit Title: Edunext Systems + School Management Software Multiple SQL injection Google Dork: inurl:/page.php?PAGE= , inurl:/image-gallery-detail.php?galid= , intext:Powered by...

Unifiedtransform 访问控制错误漏洞

Unifiedtransform is an open source school management software from the individual developer Hasib Mahmud. Unifiedtransform suffers from an Access Control Error vulnerability that stems from a lack of access control and allows unauthorized users to view and modify other users' information...

CVE-2025-2362 PHPGurukul Pre-School Enrollment System contact-us.php sql injection

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/contact-us.php. The manipulation of the argument mobnum leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-2362 PHPGurukul Pre-School Enrollment System contact-us.php sql injection

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/contact-us.php. The manipulation of the argument mobnum leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-2362

CVE-2025-2362 affects PHPGurukul Pre-School Enrollment System version 1.0. The issue is a SQL injection in the /admin/contact-us.php endpoint triggered by the mobnum argument. It is described as remotely exploitable and publicly disclosed. Multiple sources reinforce potential broad impact on conf...

CVE-2025-1669

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'addNotify' action in all versions up to, and including, 2.2.17 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

PHPGurukul Pre-School Enrollment System 注入漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul Pre-School Enrollment System, which stems from SQL injection, and could allow a remote attacker to obtain, update, and delete...

Unifiedtransform 安全漏洞

Unifiedtransform is an open source school management software from the individual developer Hasib Mahmud. A security vulnerability exists in Unifiedtransform version 2.0 that stems from improper access control and could lead to elevated privileges...

CVE-2025-2090

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php of the component Sub Admin Handler. The manipulation leads to improper access controls. The attack may be...

CVE-2025-2088

A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System up to 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument fullname/emailid/mobileNumber leads to sql injection. It is possible to launch the...

CVE-2025-2088

A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System up to 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument fullname/emailid/mobileNumber leads to sql injection. It is possible to launch the...

WordPress School Management System for Wordpress plugin <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task' vulnerability

Authenticated Subscriber+ SQL Injection via 'mjsmgtshoweventtask' vulnerability discovered by shaman0x01 in WordPress Plugin School Management versions = 92.0.0...

CVE-2024-12611

The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 93.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

CVE-2024-12610

The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'mjsmgtremovefeetype' and 'mjsmgtremovecategorynew' AJAX actions in all versions up to, and including, 93.0.0. This makes it possible for...