CVE-2024-9078

CVE-2024-9078 affects code-projects Student Record System 1.0. The vulnerability is a SQL injection in the /course.php file triggered by the coursename parameter, exploitable remotely. Connected sources confirm the issue but do not provide a confirmed patch version. Some entries (e.g., PT-2024-39...

CVE-2024-9079

CVE-2024-9079 affects code-projects Student Record System 1.0 (marks.php). The vulnerability is a SQL injection caused by improper handling of the coursename parameter in /marks.php, enabling remote attacker input to alter queries. Exploitation is described as possible over the network with low a...

CVE-2024-9080

CVE-2024-9080 affects code-projects Student Record System 1.0. The vulnerability is a SQL injection in the function handling the pincode parameter of the file /pincode-verification.php. It is exploitable remotely and exploits have been publicly disclosed. Several sources consolidate this finding,...

CVE-2024-9091

CVE-2024-9091 affects code-projects Student Record System 1.0. The vulnerable component is the /index.php functionality where manipulating the regno parameter leads to an SQL injection. Exploitation is remote and public disclosures exist. Several connected sources classify impact as high/critical...