CVE-2022-1288

CVE-2022-1288 – School Club Application System 1.0 suffers a reflected cross-site scripting (XSS) vulnerability in the /scas/admin/ page. The issue is triggered by manipulating the page parameter with the payload “%22%3E%3Cimg%20src=x%20onerror=alert(1)%3E”, which can be exploited remotely withou...

CVE-2022-1287

The CVE-2022-1287 entry concerns School Club Application System 1.0. A vulnerability in the handler for POST requests to /scas/classes/Users.php?f=save_user allows privilege escalation. The flaw is exploitable remotely without authentication, and exploitation has been publicly disclosed. This is ...

School Club Application System跨站脚本漏洞

School Club Application System is a school club application system by Carlo Montero Personal Developer. A security vulnerability exists in School Club Application System version 1.0, which stems from a cross-site scripting vulnerability caused by typing "%22%3E%3Cimg%20src=x%20onerror=alert1%3E",...

jobs.reddrivingschool.com Cross Site Scripting vulnerability OBB-2467886

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

frankfurt-school-verlag.de Cross Site Scripting vulnerability OBB-2442141

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OS4Ed OpenSIS Cross-Site Scripting Vulnerability

OS4Ed OpenSIS is OS4Ed's commercial-grade, secure, scalable and intuitive student information system, school management software. With all the functionality to run single or multiple institutions in a single installation, OS4Ed OpenSIS suffers from a cross-site scripting vulnerability that could ...

old-school-motors.de Improper Access Control vulnerability OBB-2397335

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Car Driving School Management System SQL Injection Vulnerability

A SQL injection vulnerability exists in Car Driving School Management System, a driving school management system, which stems from the fact that the product login page does not effectively filter special characters in user input data, and can be exploited to execute malicious An attacker can...

Car Driving School Management 1.0 SQL Injection Vulnerability

Title: Car Driving School Management v1.0 SQLi Author: nu11secur1ty Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15070/car-driving-school-management-system-phpoop-free-source-code.html Reference:...

Car Driving School Management System Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Car Driving School Management System, a driving school management system, which stems from the fact that the product's User Enrollment Form does not effectively filter user input data and can be exploited by attackers to The vulnerability causes...

CVE-2022-24572

Car Driving School Management System v1.0 is affected by Cross Site Scripting XSS in the User Enrollment Form Username Field. To exploit this Vulnerability, an admin views the registered user details...

CVE-2022-24572

Car Driving School Management System v1.0 is affected by Cross Site Scripting XSS in the User Enrollment Form Username Field. To exploit this Vulnerability, an admin views the registered user details...

CVE-2022-24571

Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access...

CVE-2022-24571

Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access...

CVE-2022-24572

Car Driving School Management System v1.0 is affected by Cross Site Scripting XSS in the User Enrollment Form Username Field. To exploit this Vulnerability, an admin views the registered user details...

CVE-2022-24571

Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access...

Sql injection

Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access...

CVE-2022-24572

Car Driving School Management System v1.0 contains a Cross Site Scripting (XSS) vulnerability in the User Enrollment Form Username Field. The weakness allows client‑side code execution when an admin views registered user details. Root cause cited in sources is inadequate input filtering/validatio...

CVE-2022-24572

Car Driving School Management System v1.0 is affected by Cross Site Scripting XSS in the User Enrollment Form Username Field. To exploit this Vulnerability, an admin views the registered user details...

CVE-2022-24571

Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access...