4250 matches found
Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68956)
Advanced School Management System, a school management system by Angel Jude Reyes Suarez, is a SQL injection vulnerability in version v1.0 of Advanced School Management System, which originates from /school/model/ getclassroom.php?id=The page lacks validation for external input SQL statements,...
Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68954)
Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getteacher.php?id=The page lacks validation for external input SQL statements, which...
CVE-2022-32372
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getsubject.php?id=...
CVE-2022-32371
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacher.php?id=...
CVE-2022-32372
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getsubject.php?id=...
CVE-2022-32370
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getclassroom.php?id=...
CVE-2022-32370
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getclassroom.php?id=...
CVE-2022-32371
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacher.php?id=...
CVE-2022-32372
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getsubject.php?id=...
CVE-2022-32371
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacher.php?id=...
CVE-2022-32370
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getclassroom.php?id=...
Sql injection
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacher.php?id=...
Sql injection
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getclassroom.php?id=...
CVE-2022-32370
The CVE-2022-32370 entry is corroborated across multiple feeds as a SQL injection flaw in itsourcecode Advanced School Management System v1.0, exploitable via /school/model/get_classroom.php?id=. Root cause: missing input validation on the id parameter leading to SQL statement manipulation. Repor...
CVE-2022-32370
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getclassroom.php?id=...
CVE-2022-32371
CVE-2022-32371 affects itsourcecode Advanced School Management System v1.0. The vulnerability is a SQL Injection in get_teacher.php?id= where user-supplied input is not validated, enabling potentially illegal SQL commands and data exposure as described across CVE records (CNVD, RH). The connected...
CVE-2022-32371
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacher.php?id=...
CVE-2022-32372
Affected software : itsourcecode Advanced School Management System v1.0 (open source PHP/MySQL-based). Vulnerability : SQL Injection via /school/model/get_subject.php?id= (unsafely handling user input in a SQL query). Root cause : input parameter not sanitized/filtered before database query. Impa...