Cross site scripting

Cross Site Scripting XSS vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter to the Update Account form in studentprofile.php...

CVE-2021-29055

Cross Site Scripting XSS vulnerability in sourcecodester School File Management System 1.0 via the Firtstname parameter to the Update Account form in studentprofile.php...

PT-2022-12934

Name of the Vulnerable Software and Affected Versions sourcecodester School File Management System version 1.0 Description The issue is related to a Cross Site Scripting XSS vulnerability. It can be exploited via the Lastname parameter to the Update Account form in the student profile.php file...

PT-2022-9907

Name of the Vulnerable Software and Affected Versions sourcecodester School File Management System version 1.0 Description The issue is related to a Cross Site Scripting XSS vulnerability. It can be exploited via the Firtstname parameter to the Update Account form in the student profile.php file...

School File Management System 跨站脚本漏洞

School File Management System is a school file management system that stores student files individually and retrieves them later. A cross-site scripting vulnerability exists in School File Management System version 1.0, which can be exploited to cause cross-site scripting attacks via the Lastname...

School File Management System 跨站脚本漏洞

School File Management System is a school file management system that stores student files individually and retrieves them later. A cross-site scripting vulnerability exists in School File Management System version 1.0, which can be exploited to cause cross-site scripting attacks via the Firstnam...

Student Registration and Fee Payment System SQL Injection Vulnerability

Student Registration and Fee Payment System is a student registration and fee payment management system. student registration and fee payment system v1.0 is vulnerable to SQL injection, which originates from /scms/student. php is missing SQL data filtering and escaping. An attacker could use this...

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

Sql injection

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

CVE-2022-31908

CVE-2022-31908 affects the Student Registration and Fee Payment System v1.0. The vulnerability is a SQL Injection via the login/registration endpoint at /scms/student.php, caused by missing input data filtering/escaping. This allows an attacker to inject SQL commands and potentially access/modify...

CVE-2022-31908: Improper Neutralization of Special Elements used in an SQL Command

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

PT-2022-20982

Name of the Vulnerable Software and Affected Versions Student Registration and Fee Payment System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /scms/student.php endpoint. This allows for potential exploitation. Recommendations For Student Registration and Fee...

Student Registration and Fee Payment System SQL注入漏洞

Student Registration and Fee Payment System is a student registration and fee payment management system. student registration and fee payment system v1.0 is vulnerable to SQL injection, which originates from /scms/student. php is missing SQL data filtering and escaping. An attacker could use this...

CVE-2022-32380

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getstudentsubject.php?index=...

CVE-2022-32380

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getstudentsubject.php?index=...

RosarioSIS SQL Injection Vulnerability

RosarioSIS is a student information system. Used to manage students, create reports and make sound decisions, a SQL injection vulnerability exists in versions of RosarioSIS prior to 9.0, which stems from the application's lack of validation of externally entered SQL statements. An attacker could...

PT-2022-21279

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for SQL Injection via the "/school/model/get student subject.php?index=" API endpoint, specifically through the index parameter. This could potentially lea...