CVE-2024-24099

The Scholars Tracking System version 1.0 , developed by Fabian Ros, is vulnerable to SQL Injection during the Employment Status Information Update process. The root cause is a lack of validation for externally entered SQL statements, which could allow an attacker to execute unauthorized SQL comma...

CVE-2024-24101

Affected software: Code-projects Scholars Tracking System 1.0. Vulnerability: SQL Injection in Eligibility Information Update. Root cause not explicitly stated in the provided documents. Impact (as stated): High confidentiality, integrity, and availability impact per NVD CVSS v3.1 metrics (9.8 CR...

CVE-2024-24092

The Scholars Tracking System version 1.0 by Fabian Ros is vulnerable to SQL Injection due to a lack of validation of externally entered SQL statements. Attackers can exploit this via the login.php endpoint to execute illegal SQL commands, which may lead to stealing sensitive database data or runn...

CVE-2024-24093

The Code-projects Scholars Tracking System version 1.0 is vulnerable to a SQL Injection flaw. An attacker can send specially crafted SQL statements via the Personal Information Update information/messages, potentially leading to unauthorized access and data manipulation or allowing the execution ...

CVE-2024-24097

A Cross-Site Scripting (XSS) vulnerability exists in Code-projects Scholars Tracking System 1.0 , developed by Fabian Ros. The flaw stems from a lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject a crafted payload to execute arbitrary web scripts or...