PT-2024-34441 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A Stored Cross-Site Scripting XSS issue was found in the /admin/school year.php endpoint, specifically via the school year parameter. This allows remote attackers to...

PT-2024-34423 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /admin/school year.php file, specifically via the school year parameter. This allows for potential exploitation. Recommendations: F...

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System version 1.0, which is caused by an SQL injection in the parameter schoolyear...

CVE-2024-9637 School Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.10. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it...

Gibbon School Platform 26.0.00 Code Injection

============================================================================================================================================= | Title : Gibbon School Platform 26.0.00 Code Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

CVE-2024-47095

Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the expiredSupportMessage parameter of handleloginform.do...

CVE-2024-47095 Reflected Cross-Site Scripting in Follet School Solutions Destiny

Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the expiredSupportMessage parameter of handleloginform.do...

CVE-2024-47095

CVE-2024-47095 affects Follet School Solutions Destiny prior to v22.0.1 AU1. The vulnerability is a reflected/client-side cross-site scripting issue in the handleloginform.do endpoint, exploitable via the expiredSupportMessage parameter, enabling a remote attacker to run arbitrary client-side cod...

CVE-2024-47095 Reflected Cross-Site Scripting in Follet School Solutions Destiny

Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the expiredSupportMessage parameter of handleloginform.do...

School Dormitory Management System 1.0 Insecure Settings

==================================================================================================================================== | Title : School Dormitory Management System v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefo...

Multi Branch School Management System 3.5 Backup Disclosure

============================================================================================================================================= | Title : Multi Branch School Management System 3.5 Backup Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...

CVE-2024-8784

A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users with the input...

CVE-2024-8784 QDocs Smart School Management System Chat mynewuser sql injection

A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users with the input...

CVE-2024-8784

CVE-2024-8784 affects QDocs Smart School Management System 7.0.0, specifically the Chat component at /user/chat/mynewuser. The vulnerability arises from manipulation of the POST parameter users[] that leads to SQL injection (exploitation described as remote). Publicly disclosed exploit exists; im...

CVE-2024-8784 QDocs Smart School Management System Chat mynewuser sql injection

A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users with the input...

QDocs Smart School Management System SQL注入漏洞

QDocs Smart School Management System is a smart group building system from QDocs, Inc. A SQL injection vulnerability exists in QDocs Smart School Management System version 7.0.0, which originates from a parameter in the file /user/chat/mynewuser that can lead to SQL injection...

PT-2024-39250 · Unknown · Qdocs Smart School Management System

Name of the Vulnerable Software and Affected Versions: QDocs Smart School Management System version 7.0.0 Description: A critical vulnerability was found in the QDocs Smart School Management System. The issue affects an unknown functionality of the file /user/chat/mynewuser of the component Chat...

CVE-2024-8707

A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 3.0.6. It has been declared as problematic. This vulnerability affects the function downfile of the file application/admin/controller/Appadmin.php. The manipulation of the argument url leads to path traversal. The attack can...

CVE-2024-8707 云课网络科技有限公司 Yunke Online School System Appadmin.php downfile path traversal

A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 3.0.6. It has been declared as problematic. This vulnerability affects the function downfile of the file application/admin/controller/Appadmin.php. The manipulation of the argument url leads to path traversal. The attack can...

CVE-2024-8707

The CVE-2024-8707 vulnerability affects Yunke Online School System (versions up to 3.0.6). The flaw resides in the downfile function of application/admin/controller/Appadmin.php, where the url parameter enables path traversal. Exploitation can be performed remotely and exploits have been disclose...