Lucene search
+L

4 matches found

Cvelist
Cvelist
•added 2025/07/31 12:02 a.m.•30 views

CVE-2025-8339 code-projects Intern Membership Management System student_login.php sql injection

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /studentlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...

7.5CVSS0.00582EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/31 12:00 a.m.•5 views

CVE-2025-8339: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /studentlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...

9.8CVSS5.5AI score0.00582EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/08 12:00 a.m.•6 views

CVE-2024-41238: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /smsa/studentlogin.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter...

5.3CVSS6.3AI score0.00406EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/07 12:00 a.m.•4 views

CVE-2024-41242: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS vulnerability was found in /smsa/studentlogin.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...

6.1CVSS6.4AI score0.00479EPSS
SaveExploits1References1
Rows per page
Query Builder