EUVD-2023-46019

Malicious code in bioql PyPI...

CVE-2023-41519

Student Attendance Management System v1 was discovered to contain a cross-site scripting XSS vulnerability via the sessionName parameter at createSessionTerm.php...

CVE-2023-41519

Student Attendance Management System v1 was discovered to contain a cross-site scripting XSS vulnerability via the sessionName parameter at createSessionTerm.php...

Student Attendance Management System 安全漏洞

Student Attendance Management System is a student attendance management system developed by rickxy individual developer. A security vulnerability exists in Student Attendance Management System v1, which is caused by a cross-site scripting attack due to a misuse of the sessionName parameter in the...

CVE-2023-41519

The Student Attendance Management System v1 is vulnerable to a cross-site scripting (XSS) attack due to improper neutralization of input during web page generation. The flaw exists in the createSessionTerm.php file, specifically when the sessionName parameter is processed without sufficient sanit...

CVE-2023-41519

Student Attendance Management System v1 was discovered to contain a cross-site scripting XSS vulnerability via the sessionName parameter at createSessionTerm.php...

CVE-2023-41521

The Student Attendance Management System v1 , developed by rickxy, contains multiple SQL injection vulnerabilities. The root cause is the incorrect manipulation and lack of sanitization of the id , termId , and sessionName parameters within the createSessionTerm.php file. Exploitation of these fl...

PT-2025-32287 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to a cross-site scripting XSS issue. The vulnerability is located in the createSessionTerm.php file, specifically through the...

Cross-site Scripting (XSS)

github.com/hashicorp/consul is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the sessionName, sessionMeta and aclName strings, allowing an attacker to inject and execute arbitrary script...