CVE-2022-30514

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting XSS via admin/inc/navigation.php:126...

CVE-2022-30511

School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/viewdetails.php:4...

CVE-2022-30512

School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/paymenthistory.php:31...

CVE-2022-30513

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting XSS via admin/inc/navigation.php:125...

CVE-2022-30513

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting XSS via admin/inc/navigation.php:125...

School Dormitory Management System SQL Injection Vulnerability (CNVD-2022-66677)

School Dormitory Management System is a school dormitory management system. SQL injection vulnerability exists in School Dormitory Management System, which stems from a vulnerability to SQL injection in report/dailycollectionreport.php:59 attack. An attacker could use this vulnerability to execut...

CVE-2022-30513

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting XSS via admin/inc/navigation.php:125...

CVE-2022-30513

The CVE-2022-30513 entry applies to School Dormitory Management System 1.0, which contains an authenticated cross-site scripting (XSS) vulnerability in admin/inc/navigation.php:125. The Nuclei template confirms an authenticated XSS via that file location, enabling an attacker with prior access to...

CVE-2022-30511

CVE-2022-30511 affects School Dormitory Management System 1.0 and is described as a SQL Injection via accounts/view_details.php:4. The vulnerability is demonstrated across multiple feeds (NVD, Red Hat, CNVD, CVE lists, and CNVD entries) as an injection in the accounts/view_details.php page, reach...

CVE-2022-30511

School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/viewdetails.php:4...

CVE-2022-30514

The provided connected documents confirm a concrete vulnerability: School Dormitory Management System 1.0 has an authenticated cross-site scripting (XSS) flaw in admin/inc/navigation.php:126. Exploitation involves injecting arbitrary script that runs in an authenticated user’s browser, enabling c...

CVE-2022-30514

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting XSS via admin/inc/navigation.php:126...

CVE-2022-30512

CVE-2022-30512 affects School Dormitory Management System 1.0. The connected data confirms a SQL injection in accounts/payment_history.php:31, enabling an attacker to read/modify data and potentially perform unauthorized admin operations. The issue is demonstrated by public Nuclei templates and a...

CVE-2022-30512

School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/paymenthistory.php:31...

CVE-2022-30510

The CVE-2022-30510 entry affects the School Dormitory Management System 1.0. A concrete vulnerability is a SQL Injection in reports/daily_collection_report.php:59, caused by unsafely handling the GET parameter $_GET['month']. The Red Hat/NVD/CNVD and related records confirm this is an SQL injecti...

CVE-2022-30510

School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/dailycollectionreport.php:59...

Exploit for SQL Injection in School_Dormitory_Management_System_Project School_Dormitory_Management_System

CVE-2022-30511 School Dormitory Management System 1.0 - Unauth...

CVE-2022-29359

A stored cross-site scripting XSS vulnerability in /scas/?page=clubs/applicationform&id=7 of School Club Application System v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

CVE-2022-29359

A stored cross-site scripting XSS vulnerability in /scas/?page=clubs/applicationform&id=7 of School Club Application System v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

CVE-2022-29359

A stored cross-site scripting XSS vulnerability in /scas/?page=clubs/applicationform&id=7 of School Club Application System v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...