Lucene search
K

172 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:51 a.m.4 views

CVE-2022-42235

A Stored XSS issue in Student Clearance System v.1.0 allows the injection of arbitrary JavaScript in the Student registration form...

5.4CVSS6.2AI score0.00224EPSS
Exploits1References1
OSV
OSV
added 2025/12/08 1:16 a.m.3 views

CVE-2025-14206

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

7.5CVSS5.5AI score0.0015EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/08 12:2 a.m.2 views

EUVD-2025-201617

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

6.9CVSS6.2AI score0.0015EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/12/08 12:2 a.m.32 views

CVE-2025-14206 SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

6.9CVSS0.0015EPSS
Exploits1References5
CVE
CVE
added 2025/12/08 12:2 a.m.6 views

CVE-2025-14206

CVE-2025-14206 affects SourceCodester Online Student Clearance System 1.0 in the Fee Table Handler, specifically /Admin/delete-fee.php. Manipulating the ID parameter can lead to improper authorization, with remote exploitation; public exploit details exist. Remediation guidance across connected s...

7.5CVSS6.2AI score0.0015EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/08 12:2 a.m.3 views

CVE-2025-14206 SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

6.9CVSS6.3AI score0.0015EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.5 views

PT-2025-49420

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description A flaw exists in the system that could allow improper authorization. This issue stems from manipulating the ID argument within an unknown function of the file...

7.5CVSS6.4AI score0.0015EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.6 views

SourceCodester Online Student Clearance System 授权问题漏洞

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. An authorization issue vulnerability exists in version 1.0 of the SourceCodester Online Student Clearance System, which stems from incorrect manipulation of the parameter ID in the fil...

7.5CVSS6.4AI score0.0015EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/11/25 7:7 a.m.5 views

CVE-2025-13586

A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirmpassword causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.2CVSS6.9AI score0.00026EPSS
Exploits1References1
OSV
OSV
added 2025/11/24 7:16 a.m.1 views

CVE-2025-13586

A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirmpassword causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.2CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/11/24 7:16 a.m.1 views

CVE-2025-13586

A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirmpassword causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.2CVSS0.00026EPSS
Exploits1References5
CVE
CVE
added 2025/11/24 6:2 a.m.7 views

CVE-2025-13586

SourceCodester Online Student Clearance System 1.0 contains a SQL injection in /Admin/changepassword.php through the txtconfirm_password parameter. The vulnerability arises from improper handling of the input in that function, enabling remote exploitation; multiple sources note that an exploit ha...

7.2CVSS5.1AI score0.00026EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/24 6:2 a.m.2 views

CVE-2025-13586 SourceCodester Online Student Clearance System changepassword.php sql injection

A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirmpassword causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

5.8CVSS4.9AI score0.00026EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.3 views

PT-2025-47888

A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirm password causes sql injection. It is possible to initiate the attack remotely. The exploit has been...

5.8CVSS5.3AI score0.00026EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/11/24 12:0 a.m.3 views

SourceCodester Online Student Clearance System SQL注入漏洞

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. A SQL injection vulnerability exists in SourceCodester Online Student Clearance System version 1.0, which stems from incorrect manipulation of the parameter txtconfirmpassword in the...

7.2CVSS5.8AI score0.00026EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/10/11 12:20 a.m.7 views

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

8.8CVSS6.7AI score0.00092EPSS
Exploits1References1
NVD
NVD
added 2025/10/10 4:15 p.m.3 views

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

8.8CVSS0.00092EPSS
Exploits1References2
OSV
OSV
added 2025/10/10 4:15 p.m.3 views

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

8.8CVSS5.8AI score0.00092EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/10/10 12:0 a.m.3 views

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

6.3AI score0.00092EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/10/10 12:0 a.m.8 views

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

0.00092EPSS
Exploits1References2
Rows per page
Query Builder