4296 matches found
CVE-2024-45057 Reflected Cross-Site Scripting in i-Educar
i-Educar is free, fully online school management software that can be used by school secretaries, teachers, coordinators, and area managers. A Reflected Cross-Site Scripting XSS vulnerability was identified in the dynamic generation of HTML fields prior to the 2.9 branch. The file located at...
CVE-2024-41236
A SQL injection vulnerability in /smsa/adminlogin.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page...
CVE-2024-41236
A SQL injection vulnerability in /smsa/adminlogin.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page...
CVE-2024-41236
CVE-2024-41236 affects Kashipara Responsive School Management System v3.2.0. The vulnerability resides in /smsa/admin_login.php, where the username parameter of the Admin Login Page is susceptible to SQL injection. This allows an attacker to execute arbitrary SQL commands on the backend. Impact d...
PT-2024-29314 · Unknown · Kashipara Responsive School Management System
Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: A SQL injection vulnerability in the /smsa/admin login.php file allows an attacker to execute arbitrary SQL commands via the username parameter of the Admin Login Page...
CVE-2024-41236
A SQL injection vulnerability in /smsa/adminlogin.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page...
Mount Carmel School 6.4.1 Insecure Settings
============================================================================================================================================= | Title : Mount Carmel School v6.4.1 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...
CVE-2024-42575
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php...
CVE-2024-42574
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php...
CVE-2024-42573
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php...
CVE-2024-42573
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php...
CVE-2024-42575
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php...
CVE-2024-42572
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...
CVE-2024-42572
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...
CVE-2024-42574
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php...
CVE-2024-42567
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2...
CVE-2024-42568
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php...
CVE-2024-42571
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php...