CVE-2024-13133

A vulnerability, which was classified as critical, has been found in ZeroWdd studentmanager 1.0. This issue affects the function addStudent/editStudent of the file src/main/Java/com/wdd/studentmanager/controller/StudentController. java. The manipulation of the argument file leads to unrestricted...

CVE-2024-13133

CVE-2024-13133 affects ZeroWdd’s studentmanager 1.0, specifically the addStudent/editStudent methods in src/main/Java/com/wdd/studentmanager/controller/StudentController.java. The root cause is manipulation of the file argument, enabling unrestricted file upload. This could be exploited remotely ...

PT-2025-2019

Name of the Vulnerable Software and Affected Versions ZeroWdd studentmanager version 1.0 Description A critical issue has been found in the ZeroWdd studentmanager, affecting the addStudent/editStudent function of the StudentController class. The manipulation of the file argument leads to...

PT-2025-2020

Name of the Vulnerable Software and Affected Versions ZeroWdd studentmanager version 1.0 Description A critical vulnerability was found in ZeroWdd studentmanager, affecting the addTeacher/editTeacher function of the file src/main/Java/com/wdd/studentmanager/controller/TeacherController.java. The...

PT-2025-2028

Name of the Vulnerable Software and Affected Versions ZeroWdd studentmanager version 1.0 Description A vulnerability was found in ZeroWdd studentmanager, affecting the submitAddRole function of the file src/main/java/com/zero/system/controller/RoleController.java. The manipulation of the name...

CVE-2024-13134: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in ZeroWdd studentmanager 1.0. Affected is the function addTeacher/editTeacher of the file src/main/Java/com/wdd/studentmanager/controller/TeacherController. java. The manipulation of the argument file leads to unrestricted upload. It i...

CVE-2024-13133: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in ZeroWdd studentmanager 1.0. This issue affects the function addStudent/editStudent of the file src/main/Java/com/wdd/studentmanager/controller/StudentController. java. The manipulation of the argument file leads to unrestricted...

CVE-2024-13142: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects the function submitAddRole of the file src/main/java/com/zero/system/controller/RoleController. java. The manipulation of the argument name leads to cross site scripting. The...

CVE-2023-39094

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...

CVE-2023-39094

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...

Cross site scripting

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...

ZeroWdd studentmanager 跨站脚本漏洞

studentmanager is a student management system by ZeroWdd Individual Developers. A security vulnerability exists in ZeroWdd studentmanager version v.1.0, which stems from the presence of a cross-site scripting XSS vulnerability. An attacker can exploit the vulnerability to execute arbitrary code v...

CVE-2023-39094

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...

CVE-2023-39094

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...

PT-2023-26779

Name of the Vulnerable Software and Affected Versions ZeroWdd studentmanager version 1.0 Description The issue allows a remote attacker to execute arbitrary code via the username parameter in the student list function. This is a Cross Site Scripting vulnerability. Recommendations For ZeroWdd...

CVE-2023-39094: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...

CVE-2023-39094

CVE-2023-39094 affects ZeroWdd studentmanager v1.0. The vulnerability is a cross-site scripting flaw in the student list function, exploited through the username parameter. Root cause: unsanitized input leading to script execution in the context of the victim. Documented impact: remote attackers ...