Lucene search
+L

6 matches found

CNVD
CNVD
•added 2025/06/27 12:00 a.m.•16 views

Pre-School Enrollment System add-teacher.php File SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter tsubject in the file /admin/add-teacher.php. An attack...

8.8CVSS8.2AI score0.00397EPSS
SaveExploits1References1
OSV
OSV
•added 2025/06/20 8:15 a.m.•13 views

CVE-2025-6319

A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. This issue affects some unknown processing of the file /admin/add-teacher.php. The manipulation of the argument tsubject leads to sql injection. The attack may be initiated remotely...

8.8CVSS5.8AI score0.00397EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/20 12:00 a.m.•11 views

PHPGurukul Pre-School Enrollment System 注入漏洞

Pre-School Enrollment System is a web-based preschool enrollment system. Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter tsubject in the file /admin/add-teacher.php. An attack...

8.8CVSS8.1AI score0.00397EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/20 12:00 a.m.•4 views

CVE-2025-6319: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. This issue affects some unknown processing of the file /admin/add-teacher.php. The manipulation of the argument tsubject leads to sql injection. The attack may be initiated remotely...

8.8CVSS5.5AI score0.00397EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/11 12:00 a.m.•4 views

CVE-2018-10580: Improper Neutralization of Input During Web Page Generation

The "Latest Posts on Profile" plugin 1.1 for MyBB has XSS because there is an added section in a user profile that displays that user's most recent posts without sanitizing the tsubject aka thread subject field...

5.4CVSS5.9AI score0.0161EPSS
SaveExploits5References2
Cvelist
Cvelist
•added 2008/09/10 3:00 p.m.•38 views

CVE-2008-3966

Multiple cross-site scripting XSS vulnerabilities in MyBB aka MyBulletinBoard before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via 1 a certain referrer field in usercp2.php, 2 a certain location field in inc/functionsonline.php, and certain 3 tsubject and 4 psubject fiel...

5.8AI score0.0127EPSS
SaveExploits2References6
Rows per page
Query Builder