Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/02 11:11 a.m.11 views

CVE-2025-4110

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-teacher.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be launched remotely...

8.8CVSS7.7AI score0.00197EPSS
Exploits1References1
OSV
OSV
added 2025/02/26 10:15 p.m.3 views

CVE-2024-53573

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/id...

9.8CVSS5.8AI score0.00264EPSS
Exploits1References2
OSV
OSV
added 2021/10/15 12:15 p.m.1 views

CVE-2021-42330

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can access and edit other users’ credential and personal information by crafting URL parameters...

8.8CVSS7.4AI score
Exploits0References1
NVD
NVD
added 2021/10/15 12:15 p.m.7 views

CVE-2021-42330

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can access and edit other users’ credential and personal information by crafting URL parameters...

8.8CVSS0.00175EPSS
Exploits0References1
Prion
Prion
added 2021/10/15 12:15 p.m.12 views

Design/Logic Flaw

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can access and edit other users’ credential and personal information by crafting URL parameters...

5.5CVSS8.6AI score0.00175EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/10/15 12:10 p.m.44 views

CVE-2021-42330

The CVE-2021-42330 issue affects ShinHer StudyOnline System, where the Teacher Edit function does not enforce proper authorization. According to connected records, after logging in with a user privilege, an attacker can craft URL parameters to access and edit other users’ credentials and personal...

8.8CVSS8.7AI score0.00175EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder