54 matches found
CVE-2023-46024
The CVE-2023-46024 entry concerns the phpgurukul Teacher Subject Allocation Management System 1.0. Affected software/component: index.php in the application. Vulnerable vector: the searchdata parameter, where insufficient validation protection enables SQL injection. Root cause: lack of input vali...
phpgurukul Teacher Subject Allocation Management System 安全漏洞
Teacher Subject Allocation Management System a teacher subject allocation management system. The Teacher Subject Allocation Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the searchdata parameter of...
CVE-2023-46025
The CVE-2023-46025 entry affects phpgurukul Teacher Subject Allocation Management System 1.0, specifically the teacher-info.php file. A SQL Injection vulnerability arises from inadequate validation of the editid parameter, enabling attackers to execute arbitrary SQL and potentially exfiltrate sen...
CVE-2023-46025
SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter...
CVE-2023-46024
SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter...
CVE-2023-46026
CVE-2023-46026 concerns a Cross Site Scripting (XSS) vulnerability in profile.php of phpgurukul Teacher Subject Allocation Management System 1.0. The root cause cited across connected sources is insufficient input validation/escaping for the adminname and email parameters, allowing arbitrary code...
phpgurukul Teacher Subject Allocation System 安全漏洞
Teacher Subject Allocation Management System a teacher subject allocation management system. The Teacher Subject Allocation Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the editid parameter of...
CVE-2023-46026
Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...
CVE-2023-46025
SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter...
CVE-2023-37743
A cross-site scripting XSS vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box...
CVE-2023-37743
A cross-site scripting XSS vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box...
Teacher Subject Allocation System 跨站脚本漏洞
PHPGurukul Teacher Subject Allocation System is a Teacher Subject Allocation System application from PHPGurukul, Inc. A security vulnerability exists in Teacher Subject Allocation System v1.0, which stems from a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary w...
CVE-2023-37743
CVE-2023-37743 concerns an XSS vulnerability in the Teacher Subject Allocation System v1.0. Multiple sources identify a crafted payload injected into the Search text box that allows execution of arbitrary web scripts or HTML in the victim’s browser. The core issue is insufficient input handling f...
PT-2023-26088 · Unknown · Teacher Subject Allocation System
Name of the Vulnerable Software and Affected Versions: Teacher Subject Allocation System version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box. Recommendations: For Teacher Subjec...