Lucene search
+L

4598 matches found

CNVD
CNVD
added 2025/11/20 12:00 a.m.14 views

School Fees Payment Management System /ajax.php?action=save_student file SQL injection vulnerability

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file...

9.8CVSS6AI score0.00323EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/11/20 12:00 a.m.18 views

Student Record System manage-students.php Component Cross-Site Request Forgery Vulnerability

Student Record System is a software application. Student Record System suffers from a cross-site request forgery vulnerability that stems from the manage-students.php component not adequately verifying that a request is from a trusted user, which could be exploited by an attacker to cause...

7.5CVSS6.8AI score0.00228EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/11/19 12:11 a.m.21 views

CVE-2025-63892

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS6.6AI score0.00357EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/19 12:10 a.m.22 views

CVE-2025-13325

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

8.8CVSS7AI score0.00308EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/18 7:15 p.m.10 views

CVE-2025-63955

A Cross-Site Request Forgery CSRF vulnerability in the manage-students.php component of PHPGurukul Student Record System v3.2 allows an attacker to trick an authenticated administrator into submitting a forged request. This leads to the unauthorized deletion of user accounts, causing a Denial of...

7.5CVSS5.7AI score0.00228EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
added 2025/11/18 4:55 p.m.11 views

CVE-2025-13289

A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /TeacherLogin/Academics/SubjectDetails.php. The manipulation of the argument SubCode results in sql injection. The attack may be performed from...

8.8CVSS6.4AI score0.00306EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/18 3:30 p.m.11 views

EUVD-2025-198003

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS5.5AI score0.00357EPSS
SaveExploits1References4
NVD
NVD
added 2025/11/18 3:16 p.m.10 views

CVE-2025-63892

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS0.00357EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/18 3:16 p.m.10 views

CVE-2025-63892

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function createclassroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting...

6.8CVSS4.4AI score0.00357EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/11/18 2:02 p.m.5 views

CVE-2025-13349 SourceCodester Student Grades Management System Add New Grade grades.php cross site scripting

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack ...

5.1CVSS3.7AI score0.00256EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/18 2:02 p.m.24 views

CVE-2025-13349 SourceCodester Student Grades Management System Add New Grade grades.php cross site scripting

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack ...

5.1CVSS0.00256EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/18 12:15 a.m.13 views

CVE-2025-13325

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

8.8CVSS0.00308EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/18 12:02 a.m.17 views

CVE-2025-13325

The CVE-2025-13325 entry concerns itsourcecode Student Information System 1.0. The vulnerability is in the file /enrollment_edit1.php, where manipulation of the en_id parameter enables SQL injection. The attack can be performed remotely, and public exploit details exist. Remediation or affected v...

8.8CVSS6.6AI score0.00308EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/18 12:02 a.m.20 views

CVE-2025-13325 itsourcecode Student Information System enrollment_edit1.php sql injection

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

6.5CVSS0.00308EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/18 12:02 a.m.6 views

CVE-2025-13325 itsourcecode Student Information System enrollment_edit1.php sql injection

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

6.5CVSS6.6AI score0.00308EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/18 12:02 a.m.9 views

EUVD-2025-197888

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

6.5CVSS6.4AI score0.00308EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/11/18 12:00 a.m.8 views

SourceCodester Student Grades Management System 代码注入漏洞

SourceCodester Student Grades Management System is a SourceCodester open source student grades management system. A code injection vulnerability exists in SourceCodester Student Grades Management System version 1.0, which stems from an incorrect manipulation of the parameter Remarks in the file...

5.4CVSS4.9AI score0.00256EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/18 12:00 a.m.12 views

PT-2025-47319

Name of the Vulnerable Software and Affected Versions SourceCodester Student Grades Management System version 1.0 Description A flaw exists in SourceCodester Student Grades Management System 1.0 related to the processing of the /grades.php file within the Add New Grade Page component. Manipulatio...

5.1CVSS5.6AI score0.00256EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/11/18 12:00 a.m.14 views

PHPGurukul Student Record System 安全漏洞

Student Record System is a software application. Student Record System suffers from a cross-site request forgery vulnerability that stems from the manage-students.php component not adequately verifying that a request is from a trusted user, which could be exploited by an attacker to cause...

7.5CVSS6.4AI score0.00228EPSS
SaveExploits2References3
CVE
CVE
added 2025/11/18 12:00 a.m.29 views

CVE-2025-63955

CVE-2025-63955 is a CSRF vulnerability affecting PHPGurukul Student Record System v3.2 in the manage-students.php component. The issue allows an authenticated administrator to be tricked into submitting forged requests, resulting in unauthorized deletion of user (student) accounts and an applicat...

7.5CVSS6.2AI score0.00228EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder