453 matches found
CVE-2025-50869
A stored Cross-Site Scripting (XSS) vulnerability exists in the qureydetails.php page of Institute-of-Current-Students 1.0 . The root cause is the insufficient sanitization of user input within the Query and Answer input fields. This flaw allows authenticated users to inject and execute arbitrary...
CVE-2025-50869: Improper Neutralization of Input During Web Page Generation
A stored Cross-Site Scripting XSS vulnerability exists in the qureydetails.php page of Institute-of-Current-Students 1.0, where the input fields for Query and Answer do not properly sanitize user input. Authenticated users can inject arbitrary JavaScript code...
CVE-2025-50870: Improper Access Control
Institute-of-Current-Students 1.0 is vulnerable to Incorrect Access Control in the mydetailsstudent.php endpoint. The myds GET parameter accepts an email address as input and directly returns the corresponding student's personal information without validating the identity or permissions of the...
Exploit for CVE-2025-52399
CVE-2025-52399 - SQL Injection in Institute of Current Student...
CVE-2025-51411
A reflected cross-site scripting XSS vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The application fails to properly sanitize user input before reflecting it in the HTML response. This allows unauthenticated attackers to injec...
CVE-2025-51411
A reflected cross-site scripting XSS vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The application fails to properly sanitize user input before reflecting it in the HTML response. This allows unauthenticated attackers to injec...
CVE-2025-51411
The Institute-of-Current-Students v1.0 project (PHP-Project) is vulnerable to a reflected cross-site scripting (XSS) vulnerability within the /postquerypublic endpoint. The root cause is the application's failure to sanitize the email parameter from POST data before reflecting it in the HTML resp...
Institute-of-Current-Students 安全漏洞
Institute-of-Current-Students is a school management website by the individual developer Vishal Mathur. A security vulnerability exists in version 1.0 of Institute-of-Current-Students, which stems from improper email parameter cleanup and could lead to reflective cross-site scripting...
CVE-2025-51411: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The application fails to properly sanitize user input before reflecting it in the HTML response. This allows unauthenticated attackers to injec...
Student Record System manage-students.php File SQL Injection Vulnerability
Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter del in the file /manage-students.php. An attacker can exploit this vulnerability to...
CVE-2025-6475
A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/managestudents of the component Manage Students Module. The manipulation leads to cross site scripting. The attack m...
CVE-2025-6475 SourceCodester Student Result Management System Manage Students Module manage_students cross site scripting
A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/managestudents of the component Manage Students Module. The manipulation leads to cross site scripting. The attack m...
CVE-2025-6475 SourceCodester Student Result Management System Manage Students Module manage_students cross site scripting
A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/managestudents of the component Manage Students Module. The manipulation leads to cross site scripting. The attack m...
CVE-2025-6475
CVE-2025-6475 affects SourceCodester Student Result Management System 1.0, specifically the Manage Students Module and the file path /script/admin/manage_students. The vulnerability is a cross-site scripting flaw arising from handling input in that file, exploitable remotely with public disclosur...
SourceCodester Student Result Management System 安全漏洞
SourceCodester Student Result Management System is an open source student result management system from SourceCodester. A security vulnerability exists in SourceCodester Student Result Management System version 1.0, which originates from a cross-site scripting attack due to a misuse of the file...
CVE-2025-6475: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/managestudents of the component Manage Students Module. The manipulation leads to cross site scripting. The attack m...
CVE-2025-6153
A vulnerability has been found in PHPGurukul Hostel Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/students.php. The manipulation of the argument searchbox leads to sql injection. The attack can be initiated remotely. The exploit has...
PHPGurukul Hostel Management System 注入漏洞
PHPGurukul Hostel Management System is a hostel management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Hostel Management System, which originates from an SQL injection caused by the operation of the searchbox parameter in the /admin/students.php file...
Unifiedtransform 安全漏洞
Unifiedtransform is an open source school management software by Hasib Mahmud Individual Developer. A security vulnerability exists in Unifiedtransform version v2.0, which stems from the /students/edit/id endpoint vulnerability and could lead to remote elevation of privilege...