CVE-2024-6191

CVE-2024-6191 affects itsourcecode Student Management System 1.0, specifically the Login Page login.php. The vulnerability is a SQL injection caused by unsafely handling the user parameter, exploitable remotely. Public disclosure has occurred. The connected sources discuss remote impact and the n...

CVE-2023-3008

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2023-3007

A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. T...

CVE-2023-3008

CVE-2023-3008 affects ningzichun Student Management System 1.0, specifically the login.php file. The vulnerability is a SQL injection caused by manipulation of the user/pass parameter, exploitable remotely, with public disclosures of exploits. Multiple sources in the connected set confirm the sam...

Authentication flaw

Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin' && Password: Write Something"...