CVE-2021-45348

The CVE-2021-45348 entry concerns SourceCodester Attendance Management System v1.0. An arbitrary file deletion vulnerability is triggered via the csv parameter in admin/pageUploadCSV.php, enabling a Denial of Service (crash). Public records describe the affected component as the web app’s Attenda...

CVE-2021-44598

CVE-2021-44598 affects Attendance Management System 1.0. An XSS vulnerability arises when the value of the FirstRecord request parameter is copied into an HTML tag attribute enclosed in double quotes, enabling reflected XSS. Exploitation could allow an attacker to access the system and store info...

CVE-2021-44280

CVE-2021-44280 affects Attendance Management System 1.0. A SQL injection vulnerability exists in admin/incFunctions.php via the makeSafe function. Exploitation could allow a remote attacker to view, add, modify, or delete data in the backend database. The NVD reports a base score of 7.5 (CVSS v2....