CVE-2024-42573

CVE-2024-42573 describes a SQL injection in the School Management System via the medium parameter of dtmarks.php. Affected software: School Management System (commit bae5aa). Impact: high across confidentiality, integrity, and availability; CVSSv3.1 a vector of NETWORK with no privileges and no u...

CVE-2024-42572

CVE-2024-42572 : A SQL injection vulnerability exists in the School Management System via the medium parameter on the endpoint unitmarks.php . Severity is CRITICAL (CVSS v3.1: 9.8) with impact to confidentiality, integrity, and availability. No remediation or fix versions are specified in the pro...

School-Management-System 安全漏洞

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the dtmarks.php page...

CVE-2024-42568

CVE-2024-42568 affects the School Management System. The vulnerability is an SQL injection in the transport parameter of the vehicle.php endpoint. According to the records, the attack vector is network-based with no authentication or user interaction required, and the CVSS 3.1 vector is AV:N/AC:L...

CVE-2024-42570

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at admininsert.php...

CVE-2024-42575

CVE-2024-42575 affects School Management System. A SQL injection flaw is present in the substaff.php endpoint, exploitable via the medium parameter. CVSS v3.1 metrics indicate a Base Score of 9.8 (CRITICAL) with Network attack vector, Low attack complexity, no privileges required, no user interac...

CVE-2024-42573

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php...

CVE-2024-42571

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php...

CVE-2024-42567

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2...

School-Management-System 安全漏洞

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the unitmarks.php page...

School-Management-System 安全漏洞

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the transport parameter of the vehicle.php page...

School-Management-System 安全漏洞

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the attendance.php page...

CVE-2024-42568

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php...

CVE-2024-7677

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is the function updatesettingsinfo of the file /classes/SystemSettings.php?f=updatesettings. The manipulation of the argument contact/address...

CVE-2024-7677

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is the function updatesettingsinfo of the file /classes/SystemSettings.php?f=updatesettings. The manipulation of the argument contact/address...

CVE-2024-7678

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=savepackage. The manipulation of the argument name/description/trainingduration leads to...

CVE-2024-7678

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=savepackage. The manipulation of the argument name/description/trainingduration leads to...

CVE-2024-7669

A vulnerability was found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This issue affects the function deleteenrollment of the file Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit h...

CVE-2024-7669

A vulnerability was found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This issue affects the function deleteenrollment of the file Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit h...

CVE-2024-7676

A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. It has been classified as critical. Affected is the function savepackage of the file /classes/Master.php?f=savepackage. The manipulation of the argument id leads to sql injection. It is possible to launch the...