4250 matches found
Sql injection
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacherprofile.php?myindex=...
Sql injection
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getadminprofile.php?myindex=...
Sql injection
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/gettimetable.php?id=...
Sql injection
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getparentsprofile.php?myindex=...
Code injection
itsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via ip/school/view/allteacher.php...
CVE-2022-32375
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/gettimetable.php?id=...
CVE-2022-32375
CVE-2022-32375 affects itsourcecode Advanced School Management System v1.0. The vulnerability is a SQL Injection flaw in /school/model/get_timetable.php?id=, caused by improper input handling, enabling potential unauthorized access to or manipulation of database data. The CVSS scores indicate hig...
CVE-2022-32376
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getevents.php?eventid=...
CVE-2022-32376
CVE-2022-32376 affects itsourcecode Advanced School Management System v1.0 and is caused by SQL injection in the parameter event_id of /school/model/get_events.php. The vulnerability arises from unvalidated external input, enabling attackers to manipulate SQL statements and potentially access or ...
CVE-2022-32377
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getexamtimetable.php?id=...
CVE-2022-32378
CVE-2022-32378 covers SQL Injection in the itsourcecode Advanced School Management System v1.0. The vulnerability is reachable via /school/model/get_teacher_profile.php?my_index= and arises from lack of input validation on external input, allowing attackers to manipulate SQL statements. The issue...
CVE-2022-32378
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacherprofile.php?myindex=...
CVE-2022-32379
CVE-2022-32379 affects itsourcecode Advanced School Management System v1.0, vulnerable to SQL Injection via /school/model/get_parents_profile.php?my_index=. The root cause is lack of validation for externally supplied SQL statements, enabling an attacker to potentially access or modify sensitive ...
CVE-2022-32379
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getparentsprofile.php?myindex=...
CVE-2022-32380
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getstudentsubject.php?index=...
CVE-2022-32380
CVE-2022-32380 affects itsourcecode Advanced School Management System v1.0. The vulnerability is SQL Injection in the get_student_subject.php script (via index parameter), caused by insufficient input validation. Multiple connected sources (CNVD/CNNVD/Red Hat/ CVE lists) confirm the same flaw and...
CVE-2022-32381
The CVE-2022-32381 entry concerns itsourcecode Advanced School Management System v1.0, which is vulnerable to SQL injection through /school/model/get_admin_profile.php?my_index=. The vulnerability is caused by lack of input validation for external SQL statements, enabling attackers to manipulate ...
CVE-2022-32381
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getadminprofile.php?myindex=...
CVE-2022-32433
CVE-2022-32433 affects itsourcecode Advanced School Management System v1.0. The vulnerability enables Arbitrary code execution via the endpoint ip/school/view/all_teacher.php. The CVE entry provides a basic impact assessment (CVSS v3.1: base score 7.2, HIGH) and indicates network-based access wit...