WordPress WPSchoolPress 2.1.16 Plugin - (Multiple) Cross Site Scripting Vulnerability

Exploit Title: WordPress Plugin WPSchoolPress 2.1.16 - 'Multiple' Cross Site Scripting XSS Exploit Author: Davide Taraschi Vendor Homepage: https://wpschoolpress.com/ Software Link: https://wpschoolpress.com/free-download/ Version: up to 2.1.17 non included Tested on: Ubuntu 20.04 over WordPress...

CVE-2021-40261

Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester CASAP Automated Enrollment System 1.0 via the 1 userusername and 2 category parameters in saveclass.php, the 3 firstname, 4 class, and 5 status parameters in studenttable.php, the 6 category and 7 classname parameters in...

PT-2021-22849

Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description Multiple Cross Site Scripting XSS vulnerabilities exist in the system via various parameters in different PHP files, including user username and category in "save...

Engineers Online Portal SQL注入漏洞

Sourcecodester Engineers Online Portal is an open source online portal. Sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection, which can be exploited by attackers to extract sensitive data from the web server via the announcesstudent.php id parameter of announcesstudent.php...

Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal

CVE-2021-42670 CVE-2021-42670 - SQL Injection vulnerability in...

CVE-2021-37372

Online Student Admission System 1.0 is affected by an insecure file upload vulnerability. A low privileged user can upload malicious PHP files by updating their profile image to gain remote code execution...

CVE-2021-37371

Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php...

CVE-2021-37372

Online Student Admission System 1.0 is affected by an insecure file upload vulnerability. A low privileged user can upload malicious PHP files by updating their profile image to gain remote code execution...

Design/Logic Flaw

Online Student Admission System 1.0 is affected by an insecure file upload vulnerability. A low privileged user can upload malicious PHP files by updating their profile image to gain remote code execution...

Sql injection

Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php...

CVE-2021-37371

Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php...

CVE-2021-37372

CVE-2021-37372 affects Online Student Admission System 1.0. The vulnerability is an insecure file upload that allows a low-privilege user to replace their profile image with a malicious PHP file, enabling remote code execution. Root cause cited in connected sources: lack of effective restrictions...

CVE-2021-37371

Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php...

CVE-2021-37371

CVE-2021-37371 affects Online Student Admission System 1.0 and is described as an unauthenticated SQL injection bypass vulnerability in /admin/login.php. The connected sources corroborate an unauthenticated, network-exploitable issue with high to critical impact (CVSSv3.1: 9.8; CVSSv2: 7.5), indi...

PT-2021-21625

Name of the Vulnerable Software and Affected Versions Online Student Admission System version 1.0 Description The issue is an unauthenticated SQL injection bypass vulnerability. It affects the /admin/login.php endpoint. Recommendations For Online Student Admission System version 1.0, as a tempora...

PT-2021-21626

Name of the Vulnerable Software and Affected Versions Online Student Admission System version 1.0 Description The issue allows a low privileged user to upload malicious PHP files by updating their profile image, potentially leading to remote code execution. Recommendations For Online Student...

CVE-2021-37372: Unrestricted Upload of File with Dangerous Type

Online Student Admission System 1.0 is affected by an insecure file upload vulnerability. A low privileged user can upload malicious PHP files by updating their profile image to gain remote code execution...

CVE-2021-37371: Improper Neutralization of Special Elements used in an SQL Command

Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php...

Online Student Admission System 代码问题漏洞

Online Student Admission System is an online student admission system. It is used to computerize all pre- and post-admission activities of an institution. A security vulnerability exists in Online Student Admission System version 1.0, which stems from the software's lack of effective restrictions...

CVE-2021-35601

Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft component: Students Administration. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segmen...