CVE-2023-1099

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

Sql injection

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

CVE-2023-1099 SourceCodester Online Student Management System edit-class-detail.php sql injection

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

CVE-2023-1099 SourceCodester Online Student Management System edit-class-detail.php sql injection

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

RosarioSIS 信息泄露漏洞

RosarioSIS is a free and open source student information system. Used to manage students, create reports and make sound decisions. An information disclosure vulnerability exists in RosarioSIS versions prior to 10.8.2. An attacker exploiting this vulnerability could access sensitive information...

CVE-2022-48149

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-48149

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-48149

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-48149

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-48149

CVE-2022-48149 affects the Online Student Admission System in PHP Free Source Code 1.0. The vulnerability is a SQL injection via the username parameter in the login/auth flow. Documented CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges required, no user interaction, an...

Sql injection

SQL Injection Vulnerability in tanujpatra228 Tution Management System TMS via the email parameter to processes/studentlogin.process.php...

CVE-2022-45677

SQL Injection Vulnerability in tanujpatra228 Tution Management System TMS via the email parameter to processes/studentlogin.process.php...

Tution Management System SQL注入漏洞

Tution Management System is the tuition management system. A security vulnerability exists in tanujpatra228 Tution Management System TMS that stems from the discovery of an email parameter via processes/studentlogin.process.php that contains a SQL injection vulnerability...

Broken Access Control

Vulnerability Broken Access Control Issue Description: • Access control is the way how a web application grants access to content and functions to some users and not others. • These checks are performed after authentication and govern what ‘authorized’ users are allowed to do. • Jeffrey discovere...

SUSE CVE-2015-5336

Multiple cross-site scripting XSS vulnerabilities in the survey module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the student role and entering a crafted survey...

businessstudent.com Cross Site Scripting vulnerability OBB-3185665

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-2968 · Faronics · Faronics Insight

Name of the Vulnerable Software and Affected Versions: Faronics Insight version 10.0.19045 Description: The issue is related to insufficient protection of service data in the Enhanced Security mode of the Teacher Console and Student Console of the Faronics Insight platform. Exploitation of this...

PT-2023-2993 · Faronics · Faronics Insight

Name of the Vulnerable Software and Affected Versions: Faronics Insight versions 10.0.19045 Description: The issue is related to the lack of protection of the web page structure in the Teacher Console and Student Console components of the Faronics Insight platform. This allows an attacker to...

PT-2023-2973 · Faronics · Faronics Insight

Name of the Vulnerable Software and Affected Versions: Faronics Insight version 10.0.19045 Description: The issue allows a suitably positioned attacker to perform a man-in-the-middle attack on either a connected student or teacher. This enables them to intercept student keystrokes or modify...

PT-2023-2970 · Faronics · Faronics Insight

Name of the Vulnerable Software and Affected Versions: Faronics Insight version 10.0.19045 Description: The issue allows an attacker to create a crafted program mimicking the Teacher Console, which can compel Student Consoles to connect automatically and write arbitrary files to any location on...