EUVD-2023-46019

Malicious code in bioql PyPI...

CVE-2023-41519

Student Attendance Management System v1 was discovered to contain a cross-site scripting XSS vulnerability via the sessionName parameter at createSessionTerm.php...

CVE-2023-41519

Student Attendance Management System v1 was discovered to contain a cross-site scripting XSS vulnerability via the sessionName parameter at createSessionTerm.php...

PT-2025-32287 · Unknown · Attendance Management System

Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to a cross-site scripting XSS issue. The vulnerability is located in the createSessionTerm.php file, specifically through the...

CVE-2023-41519

Student Attendance Management System v1 was discovered to contain a cross-site scripting XSS vulnerability via the sessionName parameter at createSessionTerm.php...

CVE-2023-41519

The CVE-2023-41519 affects Student Attendance Management System v1. The vulnerability is a cross-site scripting (XSS) flaw in the createSessionTerm.php script, exploitable via the sessionName parameter. This can allow injection of malicious scripts when a user submits a crafted sessionName, poten...

Student Attendance Management System 安全漏洞

Student Attendance Management System is a student attendance management system developed by rickxy individual developer. A security vulnerability exists in Student Attendance Management System v1, which is caused by a cross-site scripting attack due to a misuse of the sessionName parameter in the...

CVE-2023-41521

CVE-2023-41521 affects Student Attendance Management System v1, which contains multiple SQL injection flaws in createSessionTerm.php reachable via the id, termId, and sessionName parameters. The reported impact is severe (CVSS v3.1 base score 8.8, high confidentiality, integrity, and availability...

Cross-site Scripting (XSS)

github.com/hashicorp/consul is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the sessionName, sessionMeta and aclName strings, allowing an attacker to inject and execute arbitrary script...