CVE-2023-51801

CVE-2023-51801 Simple Student Attendance System v.1.0 - 複数のSQLインジェクション脆弱性 - studentform.php および classform.php 説明 :Simple Student Attendance System v.1.0 には、認証済みの攻撃者によって悪用される可能性のある複数のSQLインジェクション脆弱性があります。これらの脆弱性は studentform.php および classform.php に存在し、「id」パラメータを介して任意のSQLコマンドを実行することが可能です。...

CVE-2024-6212

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function getstudent of the file studentform.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. Th...

CVE-2024-6212: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function getstudent of the file studentform.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. Th...

Sql injection

SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the studentform.php and the classform.php pages...

CVE-2023-51801

SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the studentform.php and the classform.php pages...

CVE-2023-51801: Improper Control of Generation of Code

SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the studentform.php and the classform.php pages...

CVE-2023-6657: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affects an unknown part of the file /modals/studentform.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used...