UBUNTU-CVE-2024-1439

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent...

CVE-2024-1439 Inadequate access control vulnerability in Moodle

Inadequate access control in Moodle LMS. This vulnerability could allow a local user with a student role to create arbitrary events intended for users with higher roles. It could also allow the attacker to add events to the calendar of all users without their prior consent...

PT-2024-2834 · Moodle · Moodle Lms

Name of the Vulnerable Software and Affected Versions: Moodle LMS affected versions not specified Description: The issue is related to inadequate access control in the Moodle Learning Management System. This could allow a user with a student role to create arbitrary events intended for users with...

CVE-2024-25302

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

CVE-2024-25302

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

Sql injection

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

PT-2024-20872 · Sourcecodester · Sourcecodester Student Attendance Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Event Student Attendance System version 1.0 Description: The issue allows SQL Injection via the student parameter. This could potentially lead to unauthorized access or manipulation of database content. There is no information...

Event Student Attendance System SQL Injection Vulnerability

Event Student Attendance System is a student event attendance system by the individual developer Remy Andrade. An SQL injection vulnerability exists in Event Student Attendance System version 1.0, which originates from allowing SQL injection via the student parameter...

CVE-2024-25302

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

CVE-2024-25302

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

CVE-2024-25302

CVE-2024-25302 affects Sourcecodester Event Student Attendance System 1.0. The vulnerability is a SQL Injection in the parameter named student , as reported across sources (NVD/Red Hat/CNNVD/etc.). The root cause is improper handling of input leading to database query manipulation; no explicit ex...

CVE-2024-1266

A vulnerability classified as problematic was found in CodeAstro University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /streg.php of the component Student Registration Form. The manipulation of the argument Address leads to cross site scripting...

Cross site scripting

A vulnerability classified as problematic was found in CodeAstro University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /streg.php of the component Student Registration Form. The manipulation of the argument Address leads to cross site scripting...

CVE-2024-1266 CodeAstro University Management System Student Registration Form st_reg.php cross site scripting

A vulnerability classified as problematic was found in CodeAstro University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /streg.php of the component Student Registration Form. The manipulation of the argument Address leads to cross site scripting...

CVE-2024-1266 CodeAstro University Management System Student Registration Form st_reg.php cross site scripting

A vulnerability classified as problematic was found in CodeAstro University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /streg.php of the component Student Registration Form. The manipulation of the argument Address leads to cross site scripting...

CVE-2024-1265

A vulnerability classified as problematic has been found in CodeAstro University Management System 1.0. Affected is an unknown function of the file /attadd.php of the component Attendance Management. The manipulation of the argument Student Name leads to cross site scripting. It is possible to...

PT-2024-17700 · Unknown · Codeastro University Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro University Management System version 1.0 Description: A problematic issue was found in the Student Registration Form component, specifically in the /st reg.php file. The manipulation of the Address argument leads to cross-site...

CodeAstro University Management System Cross-Site Scripting Vulnerability

University Management System is a university management system. A cross-site scripting vulnerability exists in CodeAstro University Management System version 1.0, which stems from the fact that incorrect manipulation of the Student Name parameter can lead to cross-site scripting...

PT-2024-17691 · Unknown · Codeastro University Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro University Management System version 1.0 Description: A problematic vulnerability has been found in the Attendance Management component, specifically in the file /att add.php. The manipulation of the Student Name argument leads to...

PT-2024-19619 · Genesis · Genesis Aims Student Information Systems +1

Name of the Vulnerable Software and Affected Versions: Genesis AIMS Student Information Systems version 3053 Description: The issue is a cross-site scripting XSS vulnerability in the Parents & Student Portal of Genesis School Management Systems. This allows remote attackers to inject arbitrary we...