Lucene search
+L

4300 matches found

NVD
NVD
added 2025/11/30 7:15 a.m.23 views

CVE-2025-13784

A weakness has been identified in yungifez Skuul School Management System up to 2.6.5. This vulnerability affects unknown code of the file /dashboard/schools/1/edit of the component SVG File Handler. This manipulation causes cross site scripting. The attack is possible to be carried out remotely...

4.8CVSS0.0028EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/11/30 7:02 a.m.7 views

CVE-2025-13784 yungifez Skuul School Management System SVG File edit cross site scripting

A weakness has been identified in yungifez Skuul School Management System up to 2.6.5. This vulnerability affects unknown code of the file /dashboard/schools/1/edit of the component SVG File Handler. This manipulation causes cross site scripting. The attack is possible to be carried out remotely...

4.8CVSS5.4AI score0.0028EPSS
SaveExploits1References4
CVE
CVE
added 2025/11/30 7:02 a.m.24 views

CVE-2025-13784

CVE-2025-13784 affects yungifez Skuul School Management System up to version 2.6.5. The vulnerability lies in the SVG File Handler component, specifically in the /dashboard/schools/1/edit path, where manipulation enables cross-site scripting. The issue is exploitable remotely and exploits have be...

4.8CVSS3.4AI score0.0028EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/11/30 7:02 a.m.32 views

CVE-2025-13784 yungifez Skuul School Management System SVG File edit cross site scripting

A weakness has been identified in yungifez Skuul School Management System up to 2.6.5. This vulnerability affects unknown code of the file /dashboard/schools/1/edit of the component SVG File Handler. This manipulation causes cross site scripting. The attack is possible to be carried out remotely...

4.8CVSS0.0028EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/11/30 12:00 a.m.23 views

PT-2025-48387

Name of the Vulnerable Software and Affected Versions yungifez Skuul School Management System versions up to 2.6.5 Description A security issue exists in yungifez Skuul School Management System. The problem relates to the processing of the file /user/profile within the Image Handler component,...

6.5CVSS4.1AI score0.00369EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2025/11/30 12:00 a.m.21 views

PT-2025-48386

Name of the Vulnerable Software and Affected Versions yungifez Skuul School Management System versions through 2.6.5 Description A weakness exists in yungifez Skuul School Management System. This issue affects unknown code within the SVG File Handler component, specifically in the file...

4.8CVSS2.8AI score0.0028EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/11/30 12:00 a.m.13 views

Skuul school management system 代码注入漏洞

Skuul school management system is a school management system by the individual developer Marvellous Ifezue. A code injection vulnerability exists in Skuul School Management System version 2.6.5 and earlier, which stems from improper handling of SVG files in the file /dashboard/schools/1/edit, whi...

4.8CVSS4.2AI score0.0028EPSS
SaveExploits1References5
VulnCheck KEV
VulnCheck KEV
added 2025/11/27 12:00 a.m.10 views

VulnCheck KEV: CVE-2025-6403

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.7AI score0.01915EPSS
SaveIn wildExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/24 6:34 p.m.20 views

CVE-2025-13564

A security flaw has been discovered in SourceCodester Pre-School Management System 1.0. Impacted is the function removefile of the file app/controllers/FilehelperController.php. Performing manipulation of the argument filepath results in denial of service. The attack is possible to be carried out...

7.1CVSS6.7AI score0.00368EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/24 3:34 p.m.22 views

CVE-2025-13555

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public an...

9.8CVSS7.3AI score0.00387EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/23 7:15 p.m.6 views

CVE-2025-13564

A security flaw has been discovered in SourceCodester Pre-School Management System 1.0. Impacted is the function removefile of the file app/controllers/FilehelperController.php. Performing manipulation of the argument filepath results in denial of service. The attack is possible to be carried out...

7.1CVSS5.6AI score0.00368EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/23 6:32 p.m.23 views

CVE-2025-13564

Affected product: SourceCodester Pre-School Management System 1.0. The vulnerability is in the function removefile of app/controllers/FilehelperController.php; manipulating the filepath argument can cause denial of service. Exploitation is described as remote with public exploit released. Multipl...

7.1CVSS6.5AI score0.00368EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/23 6:32 p.m.6 views

CVE-2025-13564 SourceCodester Pre-School Management System FilehelperController.php removefile denial of service

A security flaw has been discovered in SourceCodester Pre-School Management System 1.0. Impacted is the function removefile of the file app/controllers/FilehelperController.php. Performing manipulation of the argument filepath results in denial of service. The attack is possible to be carried out...

5.5CVSS6.5AI score0.00368EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/23 4:15 p.m.13 views

CVE-2025-13555

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public an...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/23 3:32 p.m.26 views

CVE-2025-13555 Campcodes School File Management System Login index.php sql injection

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public an...

7.5CVSS0.00387EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/23 3:32 p.m.37 views

CVE-2025-13555

The CVE-2025-13555 affects Campcodes School File Management System 1.0, specifically the Login component’s /index.php where manipulating the stud_no parameter enables SQL injection. The root cause is an injectable query in the affected file that can be exploited remotely; public exploits exist. M...

9.8CVSS7.3AI score0.00387EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/23 3:32 p.m.5 views

CVE-2025-13555 Campcodes School File Management System Login index.php sql injection

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public an...

7.5CVSS7.3AI score0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/23 12:00 a.m.12 views

SourceCodester Pre-School Management System 安全漏洞

SourceCodester Pre-School Management System is a SourceCodester open source preschool management system. A security vulnerability exists in SourceCodester Pre-School Management System version 1.0, which originates from a misbehavior of the function removefile with respect to the parameter filepat...

7.1CVSS5.4AI score0.00368EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/23 12:00 a.m.14 views

PT-2025-47847

Name of the Vulnerable Software and Affected Versions Campcodes School File Management System version 1.0 Description A flaw exists in Campcodes School File Management System that allows for SQL injection. The issue is located within the Login component, specifically in the /index.php file...

7.5CVSS7.5AI score0.00387EPSS
SaveExploits1References11
CNVD
CNVD
added 2025/11/20 12:00 a.m.15 views

School Fees Payment Management System /ajax.php?action=login File SQL Injection Vulnerability

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement for the parameter Username in the file...

9.8CVSS6AI score0.00387EPSS
SaveExploits1References1
Rows per page
Query Builder