4 matches found
CVE-2025-8339 code-projects Intern Membership Management System student_login.php sql injection
A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /studentlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...
CVE-2025-8339: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /studentlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...
CVE-2024-41238: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /smsa/studentlogin.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter...
CVE-2024-41242: Improper Neutralization of Input During Web Page Generation
A Reflected Cross Site Scripting XSS vulnerability was found in /smsa/studentlogin.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...