CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

180 matches found

Kitploit•added 2026/09/04 2:06 p.m.•7 views

CVE-2023-51802

CVE-2023-51802 Simple Student Attendance System v.1.0 - 출석 보고서의 크로스사이트 스크립팅XSS 취약점 설명 : Simple Student Attendance System v.1.0의 크로스사이트 스크립팅 취약점으로 인해 원격 공격자가 출석 보고서 컴포넌트의 "page" 또는 "classmonth" 매개변수에 조작된 페이로드를 전달하여 임의 코드를 실행할 수 있습니다. 취약한 제품 버전 : Simple Student Attendance System v.1.0 CVE 작성자 :...

6.1CVSS5.2AI score0.00615EPSS

SaveExploits1

Kitploit•added 2026/09/04 10:18 a.m.•5 views

CVE-2023-51801

CVE-2023-51801 Простая система учета посещаемости студентов v.1.0 - Множественные уязвимости SQL-инъекций - studentform.php и classform.php Описание : Простая система учета посещаемости студентов v.1.0 подвержена множественным уязвимостям SQL-инъекций, которые могут быть использованы...

9.8CVSS6.2AI score0.01182EPSS

SaveExploits2

Vulnrichment•added 2026/06/13 10:45 p.m.•16 views

CVE-2026-12175 CodeAstro Student Attendance Management System createStudents.php sql injection

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is...

5.8CVSS5.1AI score0.00214EPSS

SaveExploits0References6

CVE•added 2026/06/13 10:45 p.m.•47 views

CVE-2026-12175

CodeAstro Student Attendance Management System 1.0 is affected. The vulnerability resides in /attendance-php/Admin/createStudents.php where manipulating the admissionNumber parameter enables an SQL injection. It supports remote exploitation and the exploit is public. No remediation or patch detai...

5.8CVSS5.3AI score0.00214EPSS

SaveExploits0References6

RedhatCVE•added 2026/06/09 8:59 p.m.•17 views

CVE-2026-11583

A vulnerability has been found in CodeAstro Student Attendance Management System 1.0. This affects an unknown function of the file /attendance-php/Admin/createClass.php. The manipulation of the argument className leads to sql injection. It is possible to initiate the attack remotely. The exploit...

6.5CVSS6.5AI score0.00204EPSS

SaveExploits0References1

Positive Technologies•added 2026/06/08 12:00 a.m.•21 views

PT-2026-47445

Name of the Vulnerable Software and Affected Versions CodeAstro Student Attendance Management System version 1.0 Description SQL injection is possible via remote attack due to the manipulation of the ID argument in the '/attendance-php/Admin/createClass.php?action=edit' endpoint. This issue affec...

6.5CVSS6.6AI score0.00204EPSS

SaveExploits0References9