Lucene search
+L

409 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/29 12:00 a.m.•1 views

CVE-2026-82424: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /studentedit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been...

6.5CVSS5.6AI score0.00341EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/08/13 3:15 p.m.•17 views

CVE-2026-19710

A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/viewdepartment.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carri...

7.5CVSS7.1AI score0.00431EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/13 3:15 p.m.•15 views

EUVD-2026-58068

A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/viewdepartment.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carri...

7.5CVSS7.1AI score0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/13 3:15 p.m.•65 views

CVE-2026-19710

CVE-2026-19710 affects SourceCodester Simple Student Information System. Affected vulnerability is in the admin/departments/view_department.php function where manipulating the ID parameter enables SQL injection, with a remote attack vector and PoC exploit publicly available. The vulnerability’s e...

7.5CVSS7.1AI score0.00431EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•11 views

PT-2026-71674

A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/view department.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

7.5CVSS7.1AI score0.00431EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/04/26 12:00 a.m.•23 views

SIMS 路径遍历漏洞

SIMS is a student and teacher information management tool developed by RawChen. Versions of SIMS 004f783b1db5ecdfad81c8fdc3b34171211112de and earlier have a path traversal vulnerability. This vulnerability stems from the handling of the filename parameter in the DeleteFileServlet endpoint...

5.5CVSS6.1AI score0.00542EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/25 2:27 a.m.•24 views

CVE-2025-15053

A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can lead to sql injection. The attack may be performed from remote. The exploit has been published and...

7.5CVSS6.7AI score0.00381EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/25 1:35 a.m.•11 views

CVE-2025-15052

A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Performing manipulation of the argument firstname/lastname results in cross site scripting. The attack is possible to be carried out remotely. The exploi...

5.4CVSS5.7AI score0.00256EPSS
SaveExploits1References1
OSV
OSV
•added 2025/12/24 2:15 a.m.•12 views

CVE-2025-15052

A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Performing manipulation of the argument firstname/lastname results in cross site scripting. The attack is possible to be carried out remotely. The exploi...

5.4CVSS4.4AI score0.00256EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/24 2:15 a.m.•22 views

CVE-2025-15052

A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Performing manipulation of the argument firstname/lastname results in cross site scripting. The attack is possible to be carried out remotely. The exploi...

5.4CVSS0.00256EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/24 2:15 a.m.•22 views

CVE-2025-15053

A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can lead to sql injection. The attack may be performed from remote. The exploit has been published and...

7.5CVSS0.00381EPSS
SaveExploits1References5
OSV
OSV
•added 2025/12/24 2:15 a.m.•15 views

CVE-2025-15053

A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can lead to sql injection. The attack may be performed from remote. The exploit has been published and...

7.3CVSS5.7AI score0.00381EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/24 2:02 a.m.•9 views

CVE-2025-15053 code-projects Student Information System searchresults.php sql injection

A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can lead to sql injection. The attack may be performed from remote. The exploit has been published and...

7.5CVSS6.5AI score0.00381EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/24 2:02 a.m.•52 views

CVE-2025-15053 code-projects Student Information System searchresults.php sql injection

A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can lead to sql injection. The attack may be performed from remote. The exploit has been published and...

7.5CVSS0.00381EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/24 2:02 a.m.•26 views

CVE-2025-15053

CVE-2025-15053 affects code-projects Student Information System 1.0. The flaw is a SQL injection in the /searchresults.php processing of the searchbox parameter, exploitable remotely. Multiple sources confirm an exploit has been published. No concrete remediation/version fix is provided in the su...

7.5CVSS6.5AI score0.00381EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/24 1:32 a.m.•6 views

CVE-2025-15052 code-projects Student Information System profile.php cross site scripting

A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Performing manipulation of the argument firstname/lastname results in cross site scripting. The attack is possible to be carried out remotely. The exploi...

5.1CVSS5.6AI score0.00256EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/24 1:32 a.m.•54 views

CVE-2025-15052 code-projects Student Information System profile.php cross site scripting

A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Performing manipulation of the argument firstname/lastname results in cross site scripting. The attack is possible to be carried out remotely. The exploi...

5.1CVSS0.00256EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/24 1:32 a.m.•35 views

CVE-2025-15052

CVE-2025-15052 affects code-projects Student Information System 1.0. The vulnerability resides in the file /profile.php, where manipulation of the firstname/lastname parameters enables cross-site scripting. This can be exploited remotely and there are public exploits. Multiple connected sources (...

5.4CVSS5.6AI score0.00256EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•1 views

CVE-2025-15053: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can lead to sql injection. The attack may be performed from remote. The exploit has been published and...

7.5CVSS5.5AI score0.00381EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•11 views

Code-Projects Student Information System SQL注入漏洞

Code-Projects Student Information System is a Code-Projects open source student information system. A SQL injection vulnerability exists in Code-Projects Student Information System version 1.0, which stems from an incorrect manipulation of the searchbox parameter in the file /searchresults.php,...

7.5CVSS7.6AI score0.00381EPSS
SaveExploits1References6
Rows per page
Query Builder