20090 matches found
CVE-2025-4468
A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument userImage leads to unrestricted upload. The attack may be initiated remotely. Th...
CVE-2025-4469
A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is...
CVE-2025-4469
A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is...
CVE-2025-4470
A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-student.php. The manipulation of the argument Fullname leads to cross site scripting. The attack can be...
CVE-2025-4467
A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack...
CVE-2025-4467
A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack...
CVE-2025-4470
CVE-2025-4470 affects SourceCodester Online Student Clearance System 1.0, where the vulnerability is in the file /admin/add-student.php. The manipulation of the Fullname parameter enables cross-site scripting (XSS). Exploitation can be performed remotely, and public exploitation has been disclose...
CVE-2025-4470 SourceCodester Online Student Clearance System add-student.php cross site scripting
A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-student.php. The manipulation of the argument Fullname leads to cross site scripting. The attack can be...
CVE-2025-4470 SourceCodester Online Student Clearance System add-student.php cross site scripting
A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-student.php. The manipulation of the argument Fullname leads to cross site scripting. The attack can be...
CVE-2025-4469 SourceCodester Online Student Clearance System add-admin.php cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is...
CVE-2025-4469
SourceCodester Online Student Clearance System 1.0 is affected by CVE-2025-4469 in the /admin/add-admin.php file. The vulnerability arises from manipulation of parameters txtusername, txtfullname, txtpassword, and txtpassword2, enabling cross-site scripting and allowing remote exploitation. Multi...
CVE-2025-4469 SourceCodester Online Student Clearance System add-admin.php cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is...
CVE-2025-4468 SourceCodester Online Student Clearance System edit-photo.php unrestricted upload
A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument userImage leads to unrestricted upload. The attack may be initiated remotely. Th...
CVE-2025-4468 SourceCodester Online Student Clearance System edit-photo.php unrestricted upload
A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument userImage leads to unrestricted upload. The attack may be initiated remotely. Th...
CVE-2025-4467 SourceCodester Online Student Clearance System edit-admin.php sql injection
A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack...
CVE-2025-4467
CVE-2025-4467 affects the SourceCodester Online Student Clearance System 1.0. The vulnerability lies in the file /admin/edit-admin.php where manipulating the parameters id, txtfullname, txtemail, and cmddesignation enables SQL injection. This can be exploited remotely, and public disclosures exis...
CVE-2025-4467 SourceCodester Online Student Clearance System edit-admin.php sql injection
A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack...
SourceCodester Client Database Management System security vulnerabilities
SourceCodester Client Database Management System is a SourceCodester open source client database management system. A security vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from an SQL injection in superadminphpmyadmin.php...
CVE-2025-46191
The SourceCodester Client Database Management System version 1.0 is vulnerable to Arbitrary File Upload in the user_payment_update.php script. The root cause is a lack of authentication, file extension checks, and MIME type validation when processing the uploaded_file_cancelled field. This allows...