CVE-2024-10840

A vulnerability classified as problematic has been found in romadebrian WEB-Sekolah 1.0. Affected is an unknown function of the file /Admin/akunedit.php of the component Backend. The manipulation of the argument kode leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2024-10842

A vulnerability, which was classified as problematic, has been found in romadebrian WEB-Sekolah 1.0. Affected by this issue is some unknown functionality of the file /Admin/ProsesEditAkun.php of the component Backend. The manipulation of the argument UsernameBaru/Password leads to cross site...

CVE-2024-10841

A vulnerability classified as critical was found in romadebrian WEB-Sekolah 1.0. Affected by this vulnerability is an unknown functionality of the file /ProsesKirim.php of the component Mail Handler. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely...

CVE-2024-10842

The CVE-2024-10842 entry concerns romadebrian WEB-Sekolah 1.0. The vulnerability arises in the Backend component, specifically the file /Admin/Proses_Edit_Akun.php, where manipulating the parameters Username_Baru and Password leads to cross-site scripting (XSS). The issue is exploitable remotely ...

CVE-2024-10841

CVE-2024-10841 affects romadebrian WEB-Sekolah v1.0, specifically the Mail Handler component where the Name argument in /Proses_Kirim.php is vulnerable to SQL injection. The vulnerability can be triggered remotely and exploitation has been disclosed publicly. Affects unknown function in the file;...

CVE-2024-10840

The CVE-2024-10840 entry concerns romadebrian WEB-Sekolah 1.0, specifically the Backend file /Admin/akun_edit.php. The vulnerability arises from unsafely handling the argument kode, enabling cross-site scripting (XSS) that can be triggered remotely. Multiple sources corroborate the same issue, wi...