Lucene search
+L

9 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/07 12:00 a.m.•4 views

CVE-2024-41240: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS vulnerability was found in " /smsa/teacherlogin.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via the "error" parameter...

6.3CVSS6.5AI score0.00476EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/07 12:00 a.m.•6 views

CVE-2024-41237: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /smsa/teacherlogin.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter...

9.8CVSS6.3AI score0.00592EPSS
SaveExploits1References1
NVD
NVD
•added 2024/02/09 1:15 p.m.•38 views

CVE-2024-25308

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacherlogin.php...

8.8CVSS9.2AI score0.00721EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/09 12:00 a.m.•6 views

CVE-2024-25309: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacherlogin.php...

8.8CVSS5.8AI score0.00706EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/02/09 12:00 a.m.•21 views

CVE-2024-25313

Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacherlogin.php...

7.2AI score0.00778EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/09 12:00 a.m.•6 views

CVE-2024-25308: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacherlogin.php...

8.8CVSS5.8AI score0.00721EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/09 12:00 a.m.•5 views

CVE-2024-25313: Improper Authentication

Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacherlogin.php...

8.8CVSS5.8AI score0.00778EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/02/09 12:00 a.m.•46 views

CVE-2024-25308

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacherlogin.php...

9.4AI score0.00721EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/02/09 12:00 a.m.•19 views

Simple School Managment System SQL注入漏洞

Simple School Managment System is Code-projects open source a simple school management system . Simple School Managment System version 1.0 SQL injection vulnerability , the vulnerability stems from the application lack of validation of external input SQL statement , an attacker can exploit the...

8.8CVSS8AI score0.00721EPSS
SaveExploits1References2
Rows per page
Query Builder