15979 matches found
CVE-2024-5381 itsourcecode Student Information Management System view.php sql injection
A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by this vulnerability is an unknown functionality of the file view.php. The manipulation of the argument studentId leads to sql injection. The attack can be launched remotely. The...
CVE-2024-5381
CVE-2024-5381 affects itsourcecode Student Information Management System 1.0. The vulnerability exists in the file view.php via manipulation of the studentId parameter, causing SQL injection. Exploitation can be remote, and multiple sources report that the exploit has been disclosed publicly. Con...
CVE-2024-5380
The CVE-2024-5380 entry describes a cross-site scripting (XSS) vulnerability in the Short URL system by jsy-1, affecting version 1.0.0. The flaw is located in an unknown function within admin.php where manipulating the url parameter enables remote exploitation. A fix exists in version 2.0.0, via ...
CVE-2024-5380 jsy-1 short-url admin.php cross site scripting
A vulnerability classified as problematic has been found in jsy-1 short-url 1.0.0. Affected is an unknown function of the file admin.php. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.0 is able to address...
CVE-2024-5379
CVE-2024-5379 is a cross-site scripting (XSS) vulnerability affecting JFinalCMS up to 20240111. The issue arises from manipulating the directory argument of the file under /admin/template , leading to XSS. The vulnerability can be exploited remotely and the exploit has been publicly disclosed. Mu...
CVE-2024-5379 JFinalCMS template cross site scripting
A vulnerability was found in JFinalCMS up to 20240111. It has been rated as problematic. This issue affects some unknown processing of the file /admin/template. The manipulation of the argument directory leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
CVE-2024-5378 SourceCodester School Intramurals Student Attendance Management System manage_sy.php sql injection
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /managesy.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...
CVE-2024-5378
CVE-2024-5378 concerns a SQL injection in SourceCodester School Intramurals Student Attendance Management System 1.0, triggered by manipulating the id parameter in /manage_sy.php. The vulnerability is exploitable remotely, with exploits publicly disclosed. The affected component is the server-sid...
CVE-2024-5377
A vulnerability was found in SourceCodester Vehicle Management System 1.0. It has been classified as critical. This affects an unknown part of the file /newvehicle.php. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...
CVE-2024-5377 SourceCodester Vehicle Management System newvehicle.php unrestricted upload
A vulnerability was found in SourceCodester Vehicle Management System 1.0. It has been classified as critical. This affects an unknown part of the file /newvehicle.php. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...
CVE-2024-5377 SourceCodester Vehicle Management System newvehicle.php unrestricted upload
A vulnerability was found in SourceCodester Vehicle Management System 1.0. It has been classified as critical. This affects an unknown part of the file /newvehicle.php. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...
CVE-2024-5376
CVE-2024-5376 affects Kashipara College Management System 1.0. The vulnerability is a cross-site scripting flaw in the file view_each_faculty.php, caused by manipulation of the id parameter. The attack vector is remote, and the exploit has been disclosed publicly per the initial report. Connected...
CVE-2024-5376 Kashipara College Management System view_each_faculty.php cross site scripting
A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file vieweachfaculty.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The...
CVE-2024-5375 Kashipara College Management System submit_student.php cross site scripting
A vulnerability has been found in Kashipara College Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file submitstudent.php. The manipulation of the argument address leads to cross site scripting. The attack can be launched...
CVE-2024-5375
The CVE-2024-5375 entry concerns Kashipara College Management System 1.0, where an attacker can trigger cross-site scripting through an unknown function in submit_student.php. The vulnerability arises from manipulation of the address parameter, enabling remote exploitation. Public disclosure of t...
CVE-2024-5375 Kashipara College Management System submit_student.php cross site scripting
A vulnerability has been found in Kashipara College Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file submitstudent.php. The manipulation of the argument address leads to cross site scripting. The attack can be launched...
CVE-2024-5374 Kashipara College Management System submit_new_faculty.php cross site scripting
A vulnerability, which was classified as problematic, was found in Kashipara College Management System 1.0. Affected is an unknown function of the file submitnewfaculty.php. The manipulation of the argument address leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2024-5374 Kashipara College Management System submit_new_faculty.php cross site scripting
A vulnerability, which was classified as problematic, was found in Kashipara College Management System 1.0. Affected is an unknown function of the file submitnewfaculty.php. The manipulation of the argument address leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2024-5373
A vulnerability, which was classified as problematic, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of the file submitlogin.php. The manipulation of the argument usertype leads to cross site scripting. The attack may be initiated remotely. T...
CVE-2024-5373
A vulnerability, which was classified as problematic, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of the file submitlogin.php. The manipulation of the argument usertype leads to cross site scripting. The attack may be initiated remotely. T...