CVE-2024-24141

CVE-2024-24141: Sistema-Gestor-de-Tareas-Escolares-InyecciónSQL-1 Prueba de ConceptoPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24141.md Prueba de ConceptoPoC : https://github.com/BurakSevben/CVE-2024-24141/blob/main/CVE-2024-24141.md...

CVE-2024-24142

CVE-2024-24142: School-Task-Manager-System-SQL-Injection-2 Prueba de Concepto PoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24142.md Prueba de Concepto PoC : https://github.com/BurakSevben/CVE-2024-24142/blob/main/CVE-2024-24142.md...

CVE-2022-29359

Sistema de Aplicación para Clubes Escolares Problema: Cross-Site Scripting Almacenado No Autenticado hasta inyección HTML y RCE Autor: Zak Clifford Fecha: 12.04.2022 Vendor: https://www.sourcecodester.com/php/15266/school-club-application-system-phpoop-free-source-code.html Software:...

CVE-2025-47445-PoC

CVE-2025-47445 PoC Esta prueba de concepto se basa en una tarea escolar donde queríamos encontrar un plugin de WordPress vulnerable y probar dicha vulnerabilidad en un entorno controlado local. Info| ---|--- Plugin de WordPress:| Wordpress Eventin Versión del plugin:| 4.0.26 o anterior Informació...

CVE-2021-41773-exploiter

CVE-2021-41773-exploiter School project - Please use other repos for actual testing...

CVE-2026-37750

CVE-2026-37750 — School Management System 1.0 - Reflected XSS Details Field| Info ---|--- CVE ID| CVE-2026-37750 Type| Reflected Cross-Site Scripting XSS Severity| Medium CVSSv3: 6.1 Vendor| mahmoudai1 Product| School Management System Version| 1.0 Discoverer| Varad AP Mene Date| 2026-04-16 CWE|...

CVE-2025-60500

CVE-2025-60500 — Insecure file upload / logic flaw in QDocs Smart School Smart School 7.1 Publication date: 2025-10-17 Author / Discoverer: Lebas Vivien Status: Reserved CVE: CVE-2025-60500 reserved Summary An insecure file upload / logic flaw in QDocs Smart School — School Management System 7.1...

CVE-2024-33911

The School Management 10.3.4 - Inyección SQL posterior a la autenticación Título del exploit: The School Management 10.3.4 - Inyección SQL posterior a la autenticación Fecha: 29 de abril de 2024 Autor del exploit: Ivan Spiridonov xbz0n Página principal del proveedor:...

CVE-2025-46204

Descripción Unifiedtransform v2.0 es vulnerable a un Control de Acceso Incorrecto. Cualquier usuario estudiantes y profesores puede acceder y modificar los detalles de los cursos a través de los endpoints /course/edit/id. Esta funcionalidad está destinada exclusivamente para uso administrativo...

CVE-2026-102913

A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=saveenrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the...

EUVD-2026-89609

A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=saveenrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-102913

The SourceCodester Car Driving School Management System 1.0 is vulnerable to a remote SQL injection flaw located within an unknown function of the /classes/Master.php?f=save_enrollment file. An attacker can exploit this flaw remotely to manipulate the database. Public exploits for this vulnerabil...

CVE-2026-102913 SourceCodester Car Driving School Management System Master.php save_enrollment sql injection

A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=saveenrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-102913: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=saveenrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the...

School Registration and Fee System SQL Injection Vulnerability (CNVD-2026-37879)

School Registration and Fee System is a school registration and fee management software developed by the SourceCodester community. The system has a SQL injection vulnerability, which stems from incorrect handling of the period parameter in the file bilal/normal/payreport.php. Attackers can exploi...

School Registration and Fee System SQL Injection Vulnerability

School Registration and Fee System is a school registration and fee management software developed by the SourceCodester community. The School Registration and Fee System has a SQL injection vulnerability, which stems from incorrect handling of the Category parameter in the file bilal/saveclass.ph...

CVE-2026-90526

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-90526

CVE-2026-90526 is a SQL injection in SourceCodester School Registration and Fee System 1.0 , specifically in an unknown function of /bilal/save_class.php via the Category argument. The vulnerability is remotely exploitable over the network with no authentication required and low attack complexity...

CVE-2026-90526 SourceCodester School Registration and Fee System save_class.php sql injection

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...

EUVD-2026-77028

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...