60 matches found
CVE-2026-12175 CodeAstro Student Attendance Management System createStudents.php sql injection
A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is...
EUVD-2023-46019
Malicious code in bioql PyPI...
EUVD-2021-32582
Malicious code in bioql PyPI...
EUVD-2022-51429
Malicious code in bioql PyPI...
EUVD-2021-32581
Malicious code in bioql PyPI...
EUVD-2022-51430
Malicious code in bioql PyPI...
CVE-2023-41524
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...
CVE-2023-41519
Student Attendance Management System v1 was discovered to contain a cross-site scripting XSS vulnerability via the sessionName parameter at createSessionTerm.php...
CVE-2023-41521
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters...
CVE-2023-41522
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...
CVE-2023-41520
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters...
CVE-2023-41524
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...
CVE-2023-41524
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...
CVE-2023-41523
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php...
CVE-2023-41522
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...
CVE-2023-41519
Student Attendance Management System v1 was discovered to contain a cross-site scripting XSS vulnerability via the sessionName parameter at createSessionTerm.php...
PT-2025-32288 · Unknown · Attendance Management System
Name of the Vulnerable Software and Affected Versions: Student Attendance Management System version 1 Description: The Student Attendance Management System is susceptible to multiple SQL injection flaws within the createClassArms.php file. These flaws are present through the classId and...
CVE-2023-41519
The CVE-2023-41519 affects Student Attendance Management System v1. The vulnerability is a cross-site scripting (XSS) flaw in the createSessionTerm.php script, exploitable via the sessionName parameter. This can allow injection of malicious scripts when a user submits a crafted sessionName, poten...