CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

209 matches found

Kitploit•added 2026/09/22 11:37 a.m.•15 views

CVE-2023-51801

CVE-2023-51801 Simple Student Attendance System v.1.0 - 複数のSQLインジェクション脆弱性 - studentform.php および classform.php 説明 :Simple Student Attendance System v.1.0 には、認証済みの攻撃者によって悪用される可能性のある複数のSQLインジェクション脆弱性があります。これらの脆弱性は studentform.php および classform.php に存在し、「id」パラメータを介して任意のSQLコマンドを実行することが可能です。...

9.8CVSS5.9AI score0.01182EPSS

SaveExploits2

Kitploit•added 2026/09/22 4:13 a.m.•14 views

CVE-2023-51802

CVE-2023-51802 Simple Student Attendance System v.1.0 - 出席レポートにおけるクロスサイトスクリプティング XSS の脆弱性説明 : Simple Student Attendance System v.1.0 のクロスサイトスクリプティング脆弱性により、リモート攻撃者が attendancereport コンポーネント内の "page" または "classmonth" パラメータに細工したペイロードを介して任意のコードを実行できる可能性があります。脆弱な製品バージョン : Simple Student Attendance...

6.1CVSS6AI score0.00615EPSS

SaveExploits1

Vulnrichment•added 2026/06/13 10:45 p.m.•19 views

CVE-2026-12175 CodeAstro Student Attendance Management System createStudents.php sql injection

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is...

5.8CVSS5.1AI score0.00214EPSS

SaveExploits0References6

CVE•added 2026/06/13 10:45 p.m.•59 views

CVE-2026-12175

CodeAstro Student Attendance Management System 1.0 is affected. The vulnerability resides in /attendance-php/Admin/createStudents.php where manipulating the admissionNumber parameter enables an SQL injection. It supports remote exploitation and the exploit is public. No remediation or patch detai...

5.8CVSS5.3AI score0.00214EPSS

SaveExploits0References6

Rapid7 Vulnerability Database (full)•added 2026/06/13 12:00 a.m.•2 views

CVE-2026-12175: Improper Neutralization of Special Elements used in an SQL Command

5.8CVSS5.6AI score0.00214EPSS

SaveExploits0References3

RedhatCVE•added 2026/06/09 8:59 p.m.•19 views

CVE-2026-11583

A vulnerability has been found in CodeAstro Student Attendance Management System 1.0. This affects an unknown function of the file /attendance-php/Admin/createClass.php. The manipulation of the argument className leads to sql injection. It is possible to initiate the attack remotely. The exploit...

6.5CVSS6.5AI score0.00204EPSS

SaveExploits0References1

Positive Technologies•added 2026/06/08 12:00 a.m.•22 views

PT-2026-47445

Name of the Vulnerable Software and Affected Versions CodeAstro Student Attendance Management System version 1.0 Description SQL injection is possible via remote attack due to the manipulation of the ID argument in the '/attendance-php/Admin/createClass.php?action=edit' endpoint. This issue affec...

6.5CVSS6.6AI score0.00204EPSS

SaveExploits0References9