Lucene search
K

6 matches found

OSV
OSV
added 2025/09/02 11:15 p.m.1 views

CVE-2025-9838

A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown function of the file /admin/modules/subject/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly availab...

9.8CVSS5.8AI score0.00066EPSS
Exploits1References5
NVD
NVD
added 2025/09/02 11:15 p.m.1 views

CVE-2025-9838

A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown function of the file /admin/modules/subject/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly availab...

9.8CVSS0.00066EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/09/02 10:32 p.m.6 views

CVE-2025-9838 itsourcecode Student Information Management System index.php sql injection

A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown function of the file /admin/modules/subject/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly availab...

7.5CVSS0.00066EPSS
Exploits1References5
CVE
CVE
added 2025/09/02 10:32 p.m.10 views

CVE-2025-9838

CVE-2025-9838 affects itsourcecode Student Information Management System 1.0. The vulnerability is an SQL injection in the unknown function of the file /admin/modules/subject/index.php caused by manipulation of the ID parameter. The issue can be exploited remotely and there are public exploit mat...

9.8CVSS7AI score0.00066EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.2 views

PT-2025-35639

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Information Management System version 1.0 Description: A SQL injection issue exists in the file /admin/modules/subject/index.php due to manipulation of the ID argument. The attack can be launched remotely. The exploit is...

9.8CVSS7.4AI score0.00066EPSS
Exploits1References9
Cvelist
Cvelist
added 2012/08/20 8:0 p.m.18 views

CVE-2012-4237

Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subjectmoduleid parameter to 1 tceeditanswer.php or 2 tceeditquestion.php...

8.1AI score0.00463EPSS
Exploits2References7
Rows per page
Query Builder