Lucene search
K

21 matches found

CNVD
CNVD
added 2025/12/25 12:0 a.m.4 views

Student File Management System update_student.php File SQL Injection Vulnerability

Student File Management System is a student file management system. The Student File Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter studentid in the file /admin/updatestudent.php. An...

9.8CVSS7.9AI score0.0004EPSS
Exploits1References1
CNVD
CNVD
added 2025/12/25 12:0 a.m.3 views

Student File Management System Cross-Site Scripting Vulnerability

Student File Management System is a student file management system. Student File Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the file /admin/updatestudent.php, which can be exploited by a...

4.8CVSS4.2AI score0.00032EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/15 2:35 p.m.3 views

CVE-2025-14663

A vulnerability was determined in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/updatestudent.php. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed a...

4.8CVSS5.7AI score0.00032EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/14 3:30 p.m.2 views

EUVD-2025-203302

A vulnerability was determined in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/updatestudent.php. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed a...

4.8CVSS5.4AI score0.00032EPSS
Exploits1References6
NVD
NVD
added 2025/12/14 2:15 p.m.3 views

CVE-2025-14663

A vulnerability was determined in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/updatestudent.php. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed a...

4.8CVSS0.00032EPSS
Exploits1References5
OSV
OSV
added 2025/12/14 2:15 p.m.2 views

CVE-2025-14663

A vulnerability was determined in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/updatestudent.php. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed a...

4.8CVSS4.1AI score0.00032EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/14 2:2 p.m.3 views

CVE-2025-14663 code-projects Student File Management System update_student.php cross site scripting

A vulnerability was determined in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/updatestudent.php. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed a...

4.8CVSS5.5AI score0.00032EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/14 2:2 p.m.17 views

CVE-2025-14663 code-projects Student File Management System update_student.php cross site scripting

A vulnerability was determined in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/updatestudent.php. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed a...

4.8CVSS0.00032EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/14 12:0 a.m.3 views

Code-Projects Student File Management System 代码注入漏洞

Student File Management System is a student file management system. Student File Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the file /admin/updatestudent.php, which can be exploited by a...

4.8CVSS4.1AI score0.00032EPSS
Exploits1References6
NVD
NVD
added 2025/12/13 6:15 p.m.2 views

CVE-2025-14623

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/updatestudent.php. This manipulation of the argument studid causes sql injection. The attack is possible to be carried out remotely. The exploit has be...

9.8CVSS0.0004EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/13 6:2 p.m.2 views

CVE-2025-14623 code-projects Student File Management System update_student.php sql injection

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/updatestudent.php. This manipulation of the argument studid causes sql injection. The attack is possible to be carried out remotely. The exploit has be...

7.5CVSS6.7AI score0.0004EPSS
Exploits1References6
CVE
CVE
added 2025/12/13 6:2 p.m.11 views

CVE-2025-14623

CVE-2025-14623 affects code-projects Student File Management System 1.0. The issue is a SQL injection in /admin/update_student.php caused by unsanitized input in the stud_id parameters (sometimes noted as student_id). Several sources report remote exploitation with a public exploit available, imp...

9.8CVSS6.7AI score0.0004EPSS
Exploits1References6Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-29719

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00054EPSS
Exploits0References6
NVD
NVD
added 2025/09/17 2:15 p.m.7 views

CVE-2025-10593

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/updatestudent.php. Performing manipulation of the argument studid results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

8.8CVSS0.00054EPSS
Exploits0References5
OSV
OSV
added 2025/09/17 2:15 p.m.2 views

CVE-2025-10593

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/updatestudent.php. Performing manipulation of the argument studid results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

8.8CVSS5.8AI score
Exploits0References5
CVE
CVE
added 2025/09/17 1:32 p.m.17 views

CVE-2025-10593

SourceCodester Online Student File Management System 1.0 is affected by a SQL injection in /admin/update_student.php when manipulating the stud_id parameter. The vulnerability is exploitable remotely, and public exploits exist. The root cause is improper handling/validation of the input in update...

8.8CVSS6.8AI score0.00054EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/17 1:32 p.m.2 views

CVE-2025-10593 SourceCodester Online Student File Management System update_student.php sql injection

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/updatestudent.php. Performing manipulation of the argument studid results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

6.5CVSS6.8AI score0.00054EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/09/17 12:0 a.m.3 views

SourceCodester Online Student File Management SQL注入漏洞

SourceCodester Online Student File Management is a SourceCodester open source online student file management system. A SQL injection vulnerability exists in SourceCodester Online Student File Management version 1.0, which originates from incorrect manipulation of the parameter studentid in the fi...

8.8CVSS6.9AI score0.00054EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/05/19 12:0 a.m.2 views

SourceCodester Student Result Management System 安全漏洞

SourceCodester Student Result Management System is a SourceCodester open source student result management system. A security vulnerability exists in SourceCodester Student Result Management System version 1.0, which originates from a path traversal caused by the operation of the parameter oldphot...

9.1CVSS5.6AI score0.00771EPSS
Exploits1References5
CVE
CVE
added 2024/02/27 12:0 a.m.3913 views

CVE-2023-41506

CVE-2023-41506 affects the Student Enrollment In PHP software (v1.0). The vulnerability is an arbitrary file upload in the Update/Edit Student’s Profile Picture function, enabling code execution by uploading a crafted PHP file. Public sources describe it as a critical issue (CVSS v3.1: 9.8, high ...

9.8CVSS7.7AI score0.00119EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder