22 matches found
CVE-2026-14698 SourceCodester Syllabus-Aligned Learning Management and Examination System upload_files.php unrestricted upload
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file uploadfiles.php. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely. The exploit has been...
EUVD-2026-41723
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file uploadfiles.php. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely. The exploit has been...
CVE-2026-14698
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file uploadfiles.php. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely. The exploit has been...
CVE-2026-14698
CVE-2026-14698 affects SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0, with the vulnerability in file upload_files.php allowing unrestricted file upload after input manipulation. The CVSS metrics indicate a network-accessible, low-privilege, low-impact vulnerabilit...
EUVD-2025-7676
Malicious code in bioql PyPI...
CVE-2024-27665
Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...
CVE-2025-25617
Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...
CVE-2025-25617
The CVE-2025-25617 issue affects Unifiedtransform 2.X and is caused by improper access control. This vulnerability enables privilege escalation, allowing teachers to create syllabi. Public details in the provided documents do not specify affected sub-versions, exact root-cause code paths, exploit...
CVE-2025-25617
Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...
CVE-2025-25617
Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...
CVE-2024-27665
Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...
CVE-2024-27665
Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...
CVE-2024-27665
Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...
Exploit for CVE-2024-27665
CVE-2024-27665 Unifiedtransform v2.X is vulnerable to Stored...
PT-2024-21983 · Unknown · Unifiedtransform
Name of the Vulnerable Software and Affected Versions: Unifiedtransform versions 2.X Description: The issue is related to Stored Cross-Site Scripting XSS via the file upload feature in the Syllabus module. This allows for malicious scripts to be stored and executed on the server. No information i...
syllabus.reitaku-u.ac.jp XSS vulnerability
Open Bug Bounty ID: OBB-706888 Description| Value ---|--- Affected Website:| syllabus.reitaku-u.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...
syllabus.azabu-u.ac.jp XSS vulnerability
Open Bug Bounty ID: OBB-706887 Description| Value ---|--- Affected Website:| syllabus.azabu-u.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
risyu.is.it-chiba.ac.jp XSS vulnerability
Open Bug Bounty ID: OBB-669528 Description| Value ---|--- Affected Website:| risyu.is.it-chiba.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
penguin.unii.ac.jp XSS vulnerability
Open Bug Bounty ID: OBB-669527 Description| Value ---|--- Affected Website:| penguin.unii.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
syllabus.sapporo-u.ac.jp XSS vulnerability
Open Bug Bounty ID: OBB-669526 Description| Value ---|--- Affected Website:| syllabus.sapporo-u.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...