74 matches found
CVE-2026-90526
CVE-2026-90526 is a SQL injection in SourceCodester School Registration and Fee System 1.0 , specifically in an unknown function of /bilal/save_class.php via the Category argument. The vulnerability is remotely exploitable over the network with no authentication required and low attack complexity...
CVE-2026-90515
A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/deletestud.php. Executing a manipulation of the argument selector can lead to sql injection. The attack can be launched remotely. The...
EUVD-2026-76999
A vulnerability was found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/payreport.php. Performing a manipulation of the argument period results in sql injection. The attack can be initiated remotely. The exploit has...
CVE-2026-90516
SourceCodester School Registration and Fee System 1.0 is affected by a remote SQL injection vulnerability in the period parameter of /bilal/normal/pay_report.php. No authentication is required, and the attack complexity is low. The CVSS 3.1 score is 7.3 (HIGH) , with low impacts to confidentialit...
CVE-2026-90514
A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-90515 SourceCodester School Registration and Fee System delete_stud.php sql injection
A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/deletestud.php. Executing a manipulation of the argument selector can lead to sql injection. The attack can be launched remotely. The...
CVE-2026-90514 SourceCodester School Registration and Fee System save_stud.php sql injection
A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
PT-2026-90864
A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/save class.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...
PT-2026-36292
Name of the Vulnerable Software and Affected Versions SourceCodester Advanced School Management System version 1.0 Description A SQL injection flaw exists in the 'checkEmail' endpoint within the commonController.php file. This issue allows remote attackers to manipulate database queries through a...
EUVD-2024-48133
Malicious code in bioql PyPI...
EUVD-2025-28878
Malicious code in bioql PyPI...
EUVD-2024-48186
Malicious code in bioql PyPI...
EUVD-2024-25375
Malicious code in bioql PyPI...
EUVD-2024-48137
Malicious code in bioql PyPI...
EUVD-2023-23902
Malicious code in bioql PyPI...
CVE-2025-9306 SourceCodester Advanced School Management System addNotice cross site scripting
A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/notice/addNotice. The manipulation of the argument noticeSubject results in cross site scripting. It is possible to launch the attack remotely...
CVE-2024-24142
Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter...
CVE-2024-7166
A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been classified as critical. Affected is an unknown function of the file /receipt.php. The manipulation of the argument efid leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...
CVE-2024-28276
Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting XSS via add-task.php?taskname=...
CVE-2024-28277
In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subjectname= parameter, enabling Stored Cross-Site Scripting XSS attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloa...