CVE-2024-1265

CVE-2024-1265 affects CodeAstro University Management System 1.0, specifically the Attendance Management component. The vulnerability resides in the /att_add.php file where manipulating the “Student Name” argument triggers cross-site scripting. It can be exploited remotely and exploitation has be...

CVE-2024-1266

CodeAstro University Management System v1.0 has a cross-site scripting vulnerability in the Student Registration Form’s /st_reg.php, caused by unsafely handling the Address parameter. The issue can be exploited remotely and has been publicly disclosed (VDB-253009). Impact is described as limited ...