Lucene search
+L

4626 matches found

CNNVD
CNNVD
added 2023/01/12 12:00 a.m.6 views

Online Student Enrollment System 跨站脚本漏洞

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy Individual Developer. A security vulnerability exists in Online Student Enrollment System version v1.0, which stems from a cross-site scripting XSS vulnerability in the component /admin /register.php that...

5.4CVSS5.7AI score0.004EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/01/12 12:00 a.m.30 views

CVE-2022-47102

A cross-site scripting XSS vulnerability in Student Study Center Management System V 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

5.4AI score0.00534EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
added 2022/12/18 9:37 a.m.16 views

studentportal.mku.ac.ke Cross Site Scripting vulnerability OBB-3106881

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2022/12/12 1:50 a.m.7 views

CVE-2022-2807 SQL Injection in Prens Student Information System

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects Prens Student Information System: before 2.1.11...

9.8CVSS7.4AI score0.0062EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/12/12 1:50 a.m.25 views

CVE-2022-2807 SQL Injection in Prens Student Information System

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects Prens Student Information System: before 2.1.11...

9.8CVSS10AI score0.0062EPSS
SaveExploits0References2
CVE
CVE
added 2022/12/12 1:50 a.m.59 views

CVE-2022-2807

CVE-2022-2807 concerns SQL Injection in the Algan Software Prens Student Information System (SIS). The vulnerability affects versions prior to 2.1.11. The issue enables unauthorized access to database information via injection flaws in the SIS surface (per PT-2022-18792). Remediation is to upgrad...

9.8CVSS7.4AI score0.0062EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/12/12 1:49 a.m.31 views

CVE-2022-2808 IDOR in Prens Student Information System

Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. This issue affects Prens Student Information System: before 2.1.11...

8.8CVSS8.9AI score0.00656EPSS
SaveExploits0References2
CVE
CVE
added 2022/12/12 1:49 a.m.72 views

CVE-2022-2808

CVE-2022-2808 affects the Algan Software Prens Student Information System prior to version 2.1.11. The connected PT-2022-18798 entry clarifies the issue as an Authorization Bypass Through User-Controlled Key vulnerability that enables Object-Relational Mapping Injection and is accompanied by an a...

8.8CVSS7.3AI score0.00656EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/12/02 12:15 p.m.17 views

CVE-2022-2807

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects Prens Student Information System: before 2.1.11...

9.8CVSS0.0062EPSS
SaveExploits0References2
NVD
NVD
added 2022/12/02 12:15 p.m.28 views

CVE-2022-2808

Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. This issue affects Prens Student Information System: before 2.1.11...

8.8CVSS0.00656EPSS
SaveExploits0References2
OSV
OSV
added 2022/12/02 12:15 p.m.7 views

CVE-2022-2807

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection.This issue affects Prens Student Information System: before 2.1.11...

9.8CVSS5.8AI score0.0062EPSS
SaveExploits0References1
Prion
Prion
added 2022/12/02 12:15 p.m.24 views

Sql injection

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection.This issue affects Prens Student Information System: before 2.1.11...

7.5CVSS9.8AI score0.0062EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/12/02 12:15 p.m.21 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection.This issue affects Prens Student Information System: before 2.1.11...

6.5CVSS8.6AI score0.00656EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/02 12:00 a.m.10 views

PT-2022-18792 · Algan · Prens Student Information System

Name of the Vulnerable Software and Affected Versions: Algan Software Prens Student Information System versions prior to 2.1.11 Description: The issue is related to SQL Injection, allowing unauthorized access to database information. This problem affects the Prens Student Information System...

9.8CVSS7.6AI score0.0062EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/12/02 12:00 a.m.7 views

Student Information System SQL注入漏洞

Student Information System is a web-based application platform by Carlo Montero, a personal developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Student Information System versions prior to 2.1.11. No informatio...

9.8CVSS8.5AI score0.0062EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/12/02 12:00 a.m.11 views

Student Information System 安全漏洞

Student Information System is a web-based application platform by Carlo Montero, a personal developer. It can help a university or college to manage student information and academic records. A security vulnerability exists in Student Information System versions prior to 2.1.11. No information abo...

8.8CVSS7.9AI score0.00656EPSS
SaveExploits0References2
NVD
NVD
added 2022/11/28 10:15 p.m.28 views

CVE-2022-45224

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in Admin/add-admin.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtfullname parameter...

4.8CVSS0.00467EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/28 10:15 p.m.12 views

CVE-2022-45224

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in Admin/add-admin.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtfullname parameter...

4.8CVSS5.9AI score0.00467EPSS
SaveExploits0References1
NVD
NVD
added 2022/11/28 10:15 p.m.35 views

CVE-2022-45223

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /Admin/add-student.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtfullname parameter...

4.8CVSS0.00467EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/28 10:15 p.m.8 views

CVE-2022-45221

Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in changepassword.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtnewpassword parameter...

4.8CVSS5.9AI score0.00458EPSS
SaveExploits0References1
Rows per page
Query Builder