4250 matches found
Exploit for CVE-2024-22890
CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Script...
CVE-2024-24141
Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter...
CVE-2024-24141
Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter...
School Task Manager Security Vulnerability
School Task Manager is a school task manager by rems personal developer. A security vulnerability exists in School Task Manager version 1.0, which is caused by a SQL injection vulnerability in the task parameter...
CVE-2024-24141
Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter...
CVE-2024-24141
CVE-2024-24141 affects Sourcecodester School Task Manager App 1.0. The issue is a SQL Injection via the task parameter, as documented by multiple sources (NVD/NVD-derived entries and Red Hat advisory). The available information indicates a high-severity impact (CVSS 3.1 base score 9.8, Confidenti...
CVE-2024-24141
Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter...
calvertonschool.org Cross Site Scripting vulnerability OBB-3842090
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for SQL Injection in Rems School_Task_Manager
CVE-2024-24142: School-Task-Manager-System-SQL-Inject...
PT-2024-4081 · Unknown · Sourcecodester School Task Manager
Name of the Vulnerable Software and Affected Versions: Sourcecodester School Task Manager version 1.0 Description: The issue is related to a lack of protection against SQL injection attacks. An attacker can exploit this to gain unauthorized access to the application's database through the subject...
Exploit for SQL Injection in Remyandrade School_Task_Manager
CVE-2024-24141: School-Task-Manager-System-SQLInject...
villiers-school.com Cross Site Scripting vulnerability OBB-3838235
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-1609
The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site...
CVE-2022-1609 The School Management < 9.9.7 - Unauthenticated RCE via REST api
The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site...
CVE-2022-1609 The School Management < 9.9.7 - Unauthenticated RCE via REST api
The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site...
Texas School Safety Software Data Leak Endangers Student Safety
By Deeba Ahmed From Background Checks to Bedroom Layouts: Data Leak Strips Bare School Security System. This is a post from HackRead.com Read the original post: Texas School Safety Software Data Leak Endangers Student Safety...
US School Shooter Emergency Plans Exposed in a Highly Sensitive Database Leak
More than 4 million school records, including safety procedures, student medical files, and court documents, were also publicly accessible online...
CVE-2023-38827
Cross Site Scripting vulnerability in Follet School Solutions Destiny v.2001AU4 and later allows a remote attacker to run arbitrary code via presentonesearchresultsform.do...
Cross site scripting
Cross Site Scripting vulnerability in Follet School Solutions Destiny v.2001AU4 and later allows a remote attacker to run arbitrary code via presentonesearchresultsform.do...