CVE-2025-50586

The StudentManage student management system by DayCloud (version 1.0 ) is vulnerable to Cross-Site Request Forgery (CSRF) . This vulnerability allows an attacker to perform unauthorized actions on behalf of a logged-in user. While the issue has been documented, there is currently no information r...

CVE-2025-50585

The StudentManage student management system (version 1.0 ) is vulnerable to a SQL injection vulnerability. This flaw exists within the /admin/adminStudentUrl component due to improper neutralization of special elements used in SQL commands. An attacker could potentially exploit this to interact w...

CVE-2025-50582

StudentManage v1.0 contains a cross-site scripting (XSS) vulnerability located within the Add A New Course module. The root cause is the improper neutralization of input during web page generation, which could allow an attacker to execute malicious scripts in a user's browser. The documents recom...

CVE-2025-50583

The student management system StudentManage v1.0 , developed by DayCloud Individual Developer, contains a cross-site scripting (XSS) vulnerability. The root cause is the mishandling of input within the Add A New Student module , which may allow an attacker to execute malicious scripts. Remediatio...

CVE-2025-50584

The StudentManage student management system (version 1.0 ) contains a cross-site scripting (XSS) vulnerability within the Add A New Teacher module. This flaw stems from the mishandling of input during web page generation, which could allow an attacker to execute malicious scripts in a victim's br...