5568 matches found
Social Codia SMS 1 Cross Site Scripting
sms-AddStudent-StoredXSS-POC Author: D4rkP0w4r Description = StoredXSS at Add Student Step to Reproduct Login to admin - Students - Add Student - input payload at Enter Name Exploit Input payload at Enter Name - clicked Add Students - access All Student - The XSS will trigger Log out admin and...
SourceCodester Simple Student Information System SQL Injection Vulnerability
Simple Student Information System is a web-based application platform that helps a university or college manage student information and academic records. SourceCodester Simple Student Information System version 1.0 is vulnerable to SQL injection, which can be exploited by attackers to send...
CVE-2022-28467
Online Student Admission v1.0 was discovered to contain a SQL injection vulnerability via the txtapplicationID parameter...
CVE-2022-27304
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...
CVE-2022-27304
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...
CVE-2022-28467
Online Student Admission v1.0 was discovered to contain a SQL injection vulnerability via the txtapplicationID parameter...
CVE-2022-28467
Online Student Admission v1.0 was discovered to contain a SQL injection vulnerability via the txtapplicationID parameter...
CVE-2022-27304
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...
Sql injection
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...
Sql injection
Online Student Admission v1.0 was discovered to contain a SQL injection vulnerability via the txtapplicationID parameter...
CVE-2022-28467
Online Student Admission v1.0 was discovered to contain a SQL injection vulnerability via the txtapplicationID parameter...
CVE-2022-28467
CVE-2022-28467 affects Online Student Admission v1.0, where a SQL injection is possible through the txtapplicationID parameter. According to the connected sources, the vulnerability is confirmed and scored high (CVSS v2 base 7.5; CVSS v3.1 base 9.8) with network attack vector and low complexity. ...
CVE-2022-27304
The CVE-2022-27304 entry applies to Student Grading System v1.0 and describes a SQL injection vulnerability in the user parameter. The vulnerability is confirmed across multiple connected sources (e.g., NVD, Red Hat and CVE registries) and is documented as a SQLi issue with the affected product. ...
CVE-2022-24231
Simple Student Information System v1.0 was discovered to contain a SQL injection vulnerability via add/Student...
CVE-2022-24231
Simple Student Information System v1.0 was discovered to contain a SQL injection vulnerability via add/Student...
CVE-2022-24231
Simple Student Information System v1.0 was discovered to contain a SQL injection vulnerability via add/Student...
Sql injection
Simple Student Information System v1.0 was discovered to contain a SQL injection vulnerability via add/Student...
CVE-2022-24231
Simple Student Information System v1.0 was discovered to contain a SQL injection vulnerability via add/Student...
CVE-2022-24231
The CVE-2022-24231 entry concerns Simple Student Information System v1.0, which is vulnerable to SQL injection via the add/Student path. The vulnerability is documented with a high-severity impact (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base score 9.8) affecting confidentiality, integrit...
PT-2022-19045
Name of the Vulnerable Software and Affected Versions Online Student Admission version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the txtapplicationID parameter. Recommendations For Online Student Admission version 1.0, consider...