Lucene search
+L

4630 matches found

NVD
NVD
added 2024/02/29 2:15 a.m.24 views

CVE-2023-51801

SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the studentform.php and the classform.php pages...

9.8CVSS8.2AI score0.01182EPSS
SaveExploits2References1
OSV
OSV
added 2024/02/29 2:15 a.m.13 views

CVE-2023-51801

SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the studentform.php and the classform.php pages...

9.8CVSS6.2AI score0.01182EPSS
SaveExploits2References1
NVD
NVD
added 2024/02/29 1:44 a.m.16 views

CVE-2024-22936

Cross-site scripting XSS vulnerability in Parents & Student Portal in Genesis School Management Systems in Genesis AIMS Student Information Systems v.3053 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

6.1CVSS5.7AI score0.00555EPSS
SaveExploits1References2
NVD
NVD
added 2024/02/29 1:43 a.m.35 views

CVE-2024-1927

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/login.php. The manipulation of the argument txtpassword leads to sql injection. The attack can be launched...

9.8CVSS6.9AI score0.00755EPSS
SaveExploits1References3
NVD
NVD
added 2024/02/29 1:43 a.m.33 views

CVE-2024-1928

A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-admin.php of the component Edit User Profile Page. The manipulation of the argument Fullname lea...

7.2CVSS5.2AI score0.00714EPSS
SaveExploits1References3
OSV
OSV
added 2024/02/29 1:43 a.m.13 views

CVE-2024-1927

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/login.php. The manipulation of the argument txtpassword leads to sql injection. The attack can be launched...

9.8CVSS5.7AI score0.00755EPSS
SaveExploits1References3
Prion
Prion
added 2024/02/29 1:43 a.m.32 views

Sql injection

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/login.php. The manipulation of the argument txtpassword leads to sql injection. The attack can be launched...

6.5CVSS8AI score0.00755EPSS
SaveExploits1References3
Prion
Prion
added 2024/02/29 1:43 a.m.28 views

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-admin.php of the component Edit User Profile Page. The manipulation of the argument Fullname lea...

5.8CVSS7.9AI score0.00714EPSS
SaveExploits1References3
CVE
CVE
added 2024/02/29 12:00 a.m.107 views

CVE-2023-51801

CVE-2023-51801 concerns a SQL injection in the Simple Student Attendance System v1.0, exploitable via the id parameter in student_form.php and class_form.php. Reported by multiple sources (Red Hat, CNNVD, PRION, NVD/CVE lists) as allowing remote code execution with high impact (C/H/I/A = 9.8). Af...

9.8CVSS8.6AI score0.01182EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2024/02/29 12:00 a.m.33 views

CVE-2023-51800

Cross Site Scripting XSS vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the mainsettings component in the phone, address, bank, accname, accnumber parameters, newclass and cname parameter, addnewparent function in t...

6.3AI score0.00628EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/02/29 12:00 a.m.14 views

Web-Based Student Clearance System SQL Injection Vulnerability

Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A SQL injection vulnerability exists in Web-Based Student Clearance System version 1.0, which stems from an incorrect manipulation of the parameter Fullname that can lead to sql...

7.2CVSS8.4AI score0.00714EPSS
SaveExploits1References4
CVE
CVE
added 2024/02/29 12:00 a.m.101 views

CVE-2023-51802

CVE-2023-51802 concerns a Cross Site Scripting (XSS) in the Simple Student Attendance System v1.0. According to multiple sources, the vulnerability affects the /php-attendance/attendance_report component and can be triggered via crafted payloads to the page or class_month parameters, potentially ...

6.1CVSS6.3AI score0.00615EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/29 12:00 a.m.16 views

CVE-2023-51800

Cross Site Scripting XSS vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the mainsettings component in the phone, address, bank, accname, accnumber parameters, newclass and cname parameter, addnewparent function in t...

6.5AI score0.00628EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/02/29 12:00 a.m.10 views

Simple Student Attendance System Security Vulnerability

Simple Student Attendance System is a simple student attendance system. A security vulnerability exists in Simple Student Attendance System version v.1.0. A remote attacker can use this vulnerability to execute arbitrary code via a specially crafted payload to the id parameter in the...

9.8CVSS7.8AI score0.01182EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2024/02/29 12:00 a.m.12 views

CVE-2023-51801

SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the studentform.php and the classform.php pages...

8.7AI score0.01182EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2024/02/29 12:00 a.m.12 views

Web-Based Student Clearance System SQL Injection Vulnerability

Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A SQL injection vulnerability exists in Web-Based Student Clearance System version 1.0, which stems from an incorrect manipulation of the parameter txtpassword that can lead to sq...

9.8CVSS8.4AI score0.00755EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/02/29 12:00 a.m.9 views

Student Information System Security Breach

Student Information System is a web-based application platform by Carlo Montero, a personal developer. It can help a university or college to manage student information and academic records. A security vulnerability exists in Student Information Systems version v.3053. A remote attacker can explo...

6.1CVSS6.3AI score0.00555EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/02/28 12:00 a.m.16 views

PT-2024-14295 · Unknown · Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: Simple Student Attendance System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the "student form.php" and "class form.php" pages. This enables the attacker t...

9.8CVSS8.4AI score0.01182EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2024/02/28 12:00 a.m.12 views

PT-2024-14294 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Fees Management System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via a crafted payload to the main settings component in the phone, address, bank, acc name, acc number...

6.1CVSS6.8AI score0.00628EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2024/02/27 5:31 p.m.13 views

CVE-2024-1928 SourceCodester Web-Based Student Clearance System Edit User Profile Page edit-admin.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-admin.php of the component Edit User Profile Page. The manipulation of the argument Fullname lea...

5.8CVSS7.6AI score0.00714EPSS
SaveExploits1References3
Rows per page
Query Builder