4625 matches found
CVE-2022-2722
A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the file managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2022-2722 SourceCodester Simple Student Information System manage_course.php sql injection
A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the file managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2022-2722 SourceCodester Simple Student Information System manage_course.php sql injection
A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the file managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...
Simple Student Information System SQL注入漏洞
Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. Simple Student Information System suffers from a SQL injection vulnerability that stems from som...
CVE-2022-2705
A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the file admin/departments/managedepartment.php. The manipulation of the argument id with the input...
CVE-2022-2705
CVE-2022-2705 affects SourceCodester Simple Student Information System, with a SQL injection in admin/departments/manage_department.php via the id parameter (example input: -5756%27%20UNION%20ALL%20SELECT%20NULL,database(),user(),NULL,NULL,NULL,NULL--). Multiple sources confirm the vulnerability ...
PT-2022-18194 · Sourcecodester · Sourcecodester Simple Student Information System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Information System affected versions not specified Description: A critical issue affects the processing of the file admin/departments/manage department.php. The manipulation of the argument id with a specific inp...
Simple Student Information System SQL注入漏洞
Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. Simple Student Information System has an SQL injection vulnerability that originates from some...
CVE-2022-2681
A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input alert/xss/ leads to cross site...
Cross site scripting
A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input alert/xss/ leads to cross site...
CVE-2022-2681
The CVE-2022-2681 entry concerns SourceCodester Online Student Admission System, specifically the Student User Page’s file edit-profile.php. The vulnerability is a cross-site scripting flaw caused by unsafely handling input (e.g., ), enabling remote exploitation. Multiple sources confirm the issu...
CVE-2022-2681 SourceCodester Online Student Admission System Student User Page edit-profile.php cross site scripting
A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input alert/xss/ leads to cross site...
CVE-2022-2681 SourceCodester Online Student Admission System Student User Page edit-profile.php cross site scripting
A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input alert/xss/ leads to cross site...
Online Student Admission System 跨站脚本漏洞
Online Student Admission System is an online student admission system. It is used to computerize all pre- and post-admission activities of an institution. A cross-site scripting vulnerability exists in the Online Student Admission System, which stems from an unknown function in its student user...
PT-2022-18086 · Sourcecodester · Sourcecodester Online Student Admission System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student Admission System affected versions not specified Description: A problematic vulnerability was found in the SourceCodester Online Student Admission System, affecting an unknown functionality of the file...
WordPress Student Result or Employee Database plugin <= 1.7.4 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability
Stored Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability discovered by Vinay Varma Mudunuri and Krishna Harsha Kondaveeti in WordPress Student Result or Employee Database plugin versions = 1.7.4. Solution Update the WordPress Student Result or Employee Database plugin to...
CVE-2021-33371
A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...
CVE-2021-33371
A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...
Cross site scripting
A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...
CVE-2021-33371
CVE-2021-33371 is a stored XSS in Student Management System v1.0 caused by unsanitized input in /nav_bar_action.php (Chat box). Multiple connected sources confirm the vulnerable endpoint and payload injection as the attack vector, leading to execution of arbitrary client-side scripts. Affected so...