4250 matches found
CVE-2023-47445
Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...
CVE-2023-47446
Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...
CVE-2023-47445
Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...
CVE-2023-47445
Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...
CVE-2023-47446
Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...
CVE-2023-47446
Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...
Sql injection
Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...
CVE-2023-47445
CVE-2023-47445 affects Pre-School Enrollment version 1.0; a SQL Injection vulnerability exists in the username parameter of the preschool/admin/ page. Root cause is improper input handling allowing crafted input to alter SQL queries, leading to potential confidentiality, integrity, and availabili...
CVE-2023-47446
Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...
CVE-2023-47446
Affected software: PHPGurukul Pre-School Enrollment (Web-based system) v1.0. Vulnerability: Cross-Site Scripting (XSS) on profile.php via the fullname parameter. Root cause (as stated): XSS vulnerability; details on input handling/output encoding not provided. Impact (as stated): enables executio...
CVE-2023-47445
Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...
CVE-2023-47446
Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...
CVE-2023-47445
Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...
CVE-2022-47430
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Weblizar The School Management – Education & Learning Management allows SQL Injection.This issue affects The School Management – Education & Learning Management: from n/a through 4.1...
CVE-2022-47430 WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Weblizar The School Management – Education & Learning Management allows SQL Injection.This issue affects The School Management – Education & Learning Management: from n/a through 4.1...
CVE-2022-47430 WordPress The School Management plugin <= 4.1 - SQL Injection
A vulnerability in Weblizar - WordPress Themes & Plugin The School Management – Education & Learning Management school-management-system.This issue affects The School Management – Education & Learning Management: from n/a through = 4.1...
CVE-2022-47430
CVE-2022-47430 affects The School Management – Education & Learning Management WordPress plugin (versions ≤ 4.1). Affects the plugin via an improper neutralization of SQL elements, enabling SQL Injection. Public records in the sources note the vulnerability severity varies: NVD indicates CVSS v3....
UCS@school Security Breach
UCS@school is a comprehensive solution that provides access to school infrastructure and applications as well as a complete toolset for operating them. A security vulnerability exists in UCS@school version v.5.0. An attacker can exploit this vulnerability to execute arbitrary code and gain...
sangerhigh.sanger.k12.ca.us Cross Site Scripting vulnerability OBB-3766621
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
library.sangerhigh.sanger.k12.ca.us Cross Site Scripting vulnerability OBB-3766620
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...