Sourcecodester Student Attendance Management System跨站脚本漏洞

Sourcecodester Student Attendance Management System is an attendance management system used to maintain daily attendance records. A cross-site scripting vulnerability exists in Sourcecodester Student Attendance Management System version 1.0. The vulnerability stems from a lack of data validation...

CVE-2021-45866

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

CVE-2021-45865

A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functionality...

CVE-2021-45865

A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functionality...

CVE-2021-45865

A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functionality...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

Unrestricted file upload

A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functionality...

CVE-2021-45865

A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functionality...

CVE-2021-45865

CVE-2021-45865 concerns the SourceCodester Student Attendance Management System v1.0 and centers on the file upload feature. Multiple connected sources describe a vulnerability caused by the application’s lack of validation for uploaded files, which can be exploited to upload malicious files and ...

CVE-2021-45866

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

CVE-2021-45866

CVE-2021-45866 affects Sourcecodester Student Attendance Management System 1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) in the couse field of index.php, arising from insufficient input validation/output handling. Reported across multiple feeds (NVD/CNVD/CNNVD) with CVSS-3.1 base ...

Online Student Admission v1.0 SQL injection Vulnerability

Title: Online Student Admission v1.0 SQLi Author: nu11secur1ty Date: 03.28.2022 Vendor: https://www.sourcecodester.com/users/walterjnr1 Software: https://www.sourcecodester.com/php/14874/online-student-admission-system.html Reference:...

GHSA-WX87-H539-4775 Moodle Information Disclosure vulnerability

It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

CVE-2021-32473

It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

CVE-2021-32473

It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

OS4Ed OpenSIS Cross-Site Scripting Vulnerability

OS4Ed OpenSIS is OS4Ed's commercial-grade, secure, scalable and intuitive student information system, school management software. With all the functionality to run single or multiple institutions in a single installation, OS4Ed OpenSIS suffers from a cross-site scripting vulnerability that could ...

CVE-2022-25016

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /studentattendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-25016

Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /studentattendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2021-41658

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

Cross site scripting

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...