Campcodes School Faculty Scheduling System 注入漏洞

Campcodes School Faculty Scheduling System is a school faculty scheduling system from Campcodes. An injection vulnerability exists in Campcodes School Faculty Scheduling System version 1.0, which stems from the parameter username in the file /admin/ajax.php?action=login that can cause SQL injecti...

CVE-2024-54790

A SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System v1.0, which allows remote attackers to execute arbitrary code via the visittime parameter...

CVE-2024-54790

CVE-2024-54790 affects PHPGurukul Pre-School Enrollment System v1.0. The vulnerability is a SQL Injection in /index.php via the visittime parameter, enabling remote attackers to execute arbitrary code. The CVSS vector indicates network access with high impact to confidentiality, integrity, and av...

CVE-2024-54810

A SQL Injection vulnerability was found in /preschool/admin/password-recovery.php in PHPGurukul Pre-School Enrollment System Project v1.0, which allows remote attackers to execute arbitrary code via the mobileno parameter...

CVE-2024-54810

CVE-2024-54810 affects PHPGurukul Pre-School Enrollment System Project v1.0. The vulnerability is a SQL Injection in /preschool/admin/password-recovery.php that allows remote attackers to execute arbitrary code via the mobileno parameter. Base metrics indicate CRITICAL impact (CVSS 3.1: AV:N/AC:L...

CVE-2024-54810

A SQL Injection vulnerability was found in /preschool/admin/password-recovery.php in PHPGurukul Pre-School Enrollment System Project v1.0, which allows remote attackers to execute arbitrary code via the mobileno parameter...

PT-2024-36444 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System version 1.0 Description: A SQL Injection issue was found in the /search class.php file, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized database access via the school ye...

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit this vulnerability to gain unauthorized access to the database by executing arbitrary SQL commands via the...

Unifiedtransform 安全漏洞

Unifiedtransform is an open source school management software from the individual developer Hasib Mahmud. A security vulnerability exists in Unifiedtransform version 2.0 and prior versions that stems from a functional-level access control vulnerability that allows teachers to modify personal...

CVE-2024-9659

The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mjsmgtuseravatarimageupload function in all versions up to, and including, 91.5.0. This makes it possible for unauthenticated attackers to upload...

CVE-2024-9659

The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mjsmgtuseravatarimageupload function in all versions up to, and including, 91.5.0. This makes it possible for unauthenticated attackers to upload...

CVE-2024-9659

CVE-2024-9659 affects School Management System for WordPress (WordPress plugin) up to version 91.5.0, where missing file type validation in mj_smgt_user_avatar_image_upload() allows unauthenticated arbitrary file uploads. The impact is described as potentially enabling remote code execution on th...

CVE-2024-9660 School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload

The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mjsmgtloaddocumetsnew and mjsmgtloaddocumets functions in all versions up to, and including, 91.5.0. This makes it possible for authenticated attacker...

CVE-2024-9660

CVE-2024-9660 (School Management System for Wordpress) The WordPress plugin versions up to 91.5.0 are vulnerable to arbitrary file uploads due to missing file-type validation in mj_smgt_load_documets_new() and mj_smgt_load_documets(), enabling authenticated users with Student-level access and abo...

CVE-2024-9660 School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload

The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mjsmgtloaddocumetsnew and mjsmgtloaddocumets functions in all versions up to, and including, 91.5.0. This makes it possible for authenticated attacker...

PT-2024-39747 · WordPress · School Management System

Name of the Vulnerable Software and Affected Versions: The School Management System for Wordpress plugin for WordPress versions up to, and including, 91.5.0 Description: The issue is related to arbitrary file uploads due to missing file type validation in the mj smgt load documets new and mj smgt...

WordPress plugin School Management System 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A code issue vulnerability exists in WordPress plugin...

WordPress plugin School Management System 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A code issue vulnerability exists in WordPress plugin...

PT-2024-39746 · WordPress · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System for Wordpress plugin for WordPress versions up to, and including, 91.5.0 Description: The issue arises from missing file type validation in the mj smgt user avatar image upload function, allowing unauthenticated...

WordPress School Management plugin <= 91.5.0 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Tonn in WordPress Plugin School Management versions = 91.5.0...