CVE-2022-2797: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Student Information System. Affected by this vulnerability is an unknown functionality of the file /admin/students/viewstudent.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

SourceCodester Student Attendance Management System文件上传漏洞

SourceCodester Student Attendance Management System is an attendance management system used to maintain daily attendance records. SourceCodester Student Attendance Management System version 1.0 contains a file upload vulnerability, which is caused by the lack of validation of uploaded files by th...

CVE-2021-45866

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

PT-2022-12445

Name of the Vulnerable Software and Affected Versions Sourcecodester Student Attendance Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the couse field in the "index.php" endpoint. This allows for malicious script execution. Recommendations For...

PT-2022-12444

Name of the Vulnerable Software and Affected Versions Sourcecodester Student Attendance Management System version 1.0 Description A File Upload issue exists via the file upload functionality. Recommendations For version 1.0, consider disabling the file upload functionality until a patch is...

CVE-2021-45866: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

CVE-2021-45865: Unrestricted Upload of File with Dangerous Type

A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functionality...

CVE-2021-41658

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

CVE-2021-41658

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

CVE-2021-41658

CVE-2021-41658 affects the Sourcecodester Student Quarterly Grading System (by oretnom23). The vulnerability is a Cross Site Scripting (XSS) issue exploitable via the fullname and username parameters on the users page, allowing an attacker to execute arbitrary code. The connected records corrobor...

PT-2022-11455

Name of the Vulnerable Software and Affected Versions Sourcecodester Student Quarterly Grading System affected versions not specified Description The issue allows attackers to execute arbitrary code via the fullname and username parameters to the "users page" API endpoint. This enables the...

CVE-2021-41658: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

CVE-2020-25955

SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting XSS via the 'add subject' tab...

CVE-2020-25955: Improper Neutralization of Input During Web Page Generation

SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting XSS via the 'add subject' tab...