54 matches found
CVE-2023-46024
SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter...
CVE-2023-46025
The CVE-2023-46025 entry affects phpgurukul Teacher Subject Allocation Management System 1.0, specifically the teacher-info.php file. A SQL Injection vulnerability arises from inadequate validation of the editid parameter, enabling attackers to execute arbitrary SQL and potentially exfiltrate sen...
CVE-2023-46026
CVE-2023-46026 concerns a Cross Site Scripting (XSS) vulnerability in profile.php of phpgurukul Teacher Subject Allocation Management System 1.0. The root cause cited across connected sources is insufficient input validation/escaping for the adminname and email parameters, allowing arbitrary code...
CVE-2023-46024
The CVE-2023-46024 entry concerns the phpgurukul Teacher Subject Allocation Management System 1.0. Affected software/component: index.php in the application. Vulnerable vector: the searchdata parameter, where insufficient validation protection enables SQL injection. Root cause: lack of input vali...
CVE-2023-46024
SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter...
CVE-2023-46025
SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter...
CVE-2023-46025
SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter...
CVE-2023-46026
Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...
phpgurukul Teacher Subject Allocation System 安全漏洞
Teacher Subject Allocation Management System a teacher subject allocation management system. The Teacher Subject Allocation Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the editid parameter of...
CVE-2023-37743
A cross-site scripting XSS vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box...
CVE-2023-37743
A cross-site scripting XSS vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box...
PT-2023-26088 · Unknown · Teacher Subject Allocation System
Name of the Vulnerable Software and Affected Versions: Teacher Subject Allocation System version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box. Recommendations: For Teacher Subjec...
Teacher Subject Allocation System 跨站脚本漏洞
PHPGurukul Teacher Subject Allocation System is a Teacher Subject Allocation System application from PHPGurukul, Inc. A security vulnerability exists in Teacher Subject Allocation System v1.0, which stems from a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary w...
CVE-2023-37743
CVE-2023-37743 concerns an XSS vulnerability in the Teacher Subject Allocation System v1.0. Multiple sources identify a crafted payload injected into the Search text box that allows execution of arbitrary web scripts or HTML in the victim’s browser. The core issue is insufficient input handling f...