Lucene search

Online Student Enrollment System Security Vulnerabilities - 2023

cve

CVE-2022-46502

Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /student_enrollment/admin/login.php.

9.8CVSS

9.7AI Score

0.002EPSS

2023-01-13 02:15 AM

cve

CVE-2022-46503

A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter.

5.4CVSS

5.3AI Score

0.001EPSS

2023-01-12 03:15 PM