Lucene search
+L

4625 matches found

NVD
NVD
added 2022/08/09 7:15 a.m.18 views

CVE-2022-2722

A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the file managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS0.00849EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2022/08/09 7:10 a.m.7 views

CVE-2022-2722 SourceCodester Simple Student Information System manage_course.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the file managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.3CVSS7.6AI score0.00849EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/08/09 7:10 a.m.29 views

CVE-2022-2722 SourceCodester Simple Student Information System manage_course.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the file managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.3CVSS10AI score0.00849EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/09 12:00 a.m.9 views

Simple Student Information System SQL注入漏洞

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. Simple Student Information System suffers from a SQL injection vulnerability that stems from som...

9.8CVSS8.1AI score0.00849EPSS
SaveExploits1References3
NVD
NVD
added 2022/08/08 1:15 p.m.29 views

CVE-2022-2705

A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the file admin/departments/managedepartment.php. The manipulation of the argument id with the input...

9.8CVSS0.00738EPSS
SaveExploits1References2
CVE
CVE
added 2022/08/08 12:50 p.m.65 views

CVE-2022-2705

CVE-2022-2705 affects SourceCodester Simple Student Information System, with a SQL injection in admin/departments/manage_department.php via the id parameter (example input: -5756%27%20UNION%20ALL%20SELECT%20NULL,database(),user(),NULL,NULL,NULL,NULL--). Multiple sources confirm the vulnerability ...

9.8CVSS8.3AI score0.00738EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/08 12:00 a.m.11 views

PT-2022-18194 · Sourcecodester · Sourcecodester Simple Student Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Information System affected versions not specified Description: A critical issue affects the processing of the file admin/departments/manage department.php. The manipulation of the argument id with a specific inp...

9.8CVSS9.8AI score0.00738EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/08/08 12:00 a.m.13 views

Simple Student Information System SQL注入漏洞

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. Simple Student Information System has an SQL injection vulnerability that originates from some...

9.8CVSS8.2AI score0.00738EPSS
SaveExploits1References3
NVD
NVD
added 2022/08/05 9:15 p.m.19 views

CVE-2022-2681

A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input alert/xss/ leads to cross site...

6.1CVSS0.00525EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/05 9:15 p.m.23 views

Cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input alert/xss/ leads to cross site...

5.8CVSS6AI score0.00525EPSS
SaveExploits1References2
CVE
CVE
added 2022/08/05 8:21 p.m.78 views

CVE-2022-2681

The CVE-2022-2681 entry concerns SourceCodester Online Student Admission System, specifically the Student User Page’s file edit-profile.php. The vulnerability is a cross-site scripting flaw caused by unsafely handling input (e.g., ), enabling remote exploitation. Multiple sources confirm the issu...

6.1CVSS4.8AI score0.00525EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/08/05 8:21 p.m.26 views

CVE-2022-2681 SourceCodester Online Student Admission System Student User Page edit-profile.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input alert/xss/ leads to cross site...

3.5CVSS6.2AI score0.00525EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2022/08/05 8:21 p.m.11 views

CVE-2022-2681 SourceCodester Online Student Admission System Student User Page edit-profile.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input alert/xss/ leads to cross site...

3.5CVSS6.5AI score0.00525EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/05 12:00 a.m.9 views

Online Student Admission System 跨站脚本漏洞

Online Student Admission System is an online student admission system. It is used to computerize all pre- and post-admission activities of an institution. A cross-site scripting vulnerability exists in the Online Student Admission System, which stems from an unknown function in its student user...

6.1CVSS5.3AI score0.00525EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/08/05 12:00 a.m.12 views

PT-2022-18086 · Sourcecodester · Sourcecodester Online Student Admission System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student Admission System affected versions not specified Description: A problematic vulnerability was found in the SourceCodester Online Student Admission System, affecting an unknown functionality of the file...

6.1CVSS5.9AI score0.00525EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2022/08/01 12:00 a.m.20 views

WordPress Student Result or Employee Database plugin <= 1.7.4 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Stored Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability discovered by Vinay Varma Mudunuri and Krishna Harsha Kondaveeti in WordPress Student Result or Employee Database plugin versions = 1.7.4. Solution Update the WordPress Student Result or Employee Database plugin to...

5.4CVSS2.1AI score0.00301EPSS
SaveExploits2References1Affected Software1
NVD
NVD
added 2022/07/28 12:15 a.m.26 views

CVE-2021-33371

A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...

5.4CVSS0.00592EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/28 12:15 a.m.10 views

CVE-2021-33371

A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...

5.4CVSS6.2AI score0.00592EPSS
SaveExploits1References2
Prion
Prion
added 2022/07/28 12:15 a.m.24 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...

4.9CVSS5.2AI score0.00592EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/07/27 11:15 p.m.65 views

CVE-2021-33371

CVE-2021-33371 is a stored XSS in Student Management System v1.0 caused by unsanitized input in /nav_bar_action.php (Chat box). Multiple connected sources confirm the vulnerable endpoint and payload injection as the attack vector, leading to execution of arbitrary client-side scripts. Affected so...

5.4CVSS5.2AI score0.00592EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder