Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
JanobeSchool Event Management System

13 matches found

CVE
CVE•added 2024/08/06 1:15 p.m.•35 views

CVE-2024-33992

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/student/index.php'.

7.1CVSS5.4AI score0.00085EPSS
CVE
CVE•added 2024/08/06 1:15 p.m.•33 views

CVE-2024-33988

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and 'YearLe...

7.1CVSS6.2AI score0.00085EPSS
CVE
CVE•added 2024/08/06 1:15 p.m.•33 views

CVE-2024-33993

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in /candidate/index.php'.

7.1CVSS5.7AI score0.00085EPSS
CVE
CVE•added 2024/08/06 1:15 p.m.•28 views

CVE-2024-33983

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and 'YearLe...

7.1CVSS6.2AI score0.00085EPSS
CVE
CVE•added 2024/08/06 1:15 p.m.•25 views

CVE-2024-33991

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/eventwinner/index.php'.

7.1CVSS5.4AI score0.00085EPSS
CVE
CVE•added 2024/08/06 1:15 p.m.•24 views

CVE-2024-33989

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser session via the 'eventdate' and 'events' pa...

7.1CVSS5.6AI score0.00139EPSS
CVE
CVE•added 2024/08/06 1:15 p.m.•23 views

CVE-2024-33994

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in '/event/index.php'.

7.1CVSS5.7AI score0.00085EPSS
CVE
CVE•added 2024/08/06 1:15 p.m.•22 views

CVE-2024-33986

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in '/department/index...

7.1CVSS6.2AI score0.00085EPSS
CVE
CVE•added 2024/08/06 1:15 p.m.•21 views

CVE-2024-33987

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate', 'YearLevel...

7.1CVSS6.2AI score0.00085EPSS
CVE
CVE•added 2024/08/06 1:15 p.m.•21 views

CVE-2024-33990

Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser session via the 'id' and 'view' parameters ...

7.1CVSS5.6AI score0.00139EPSS
CVE
CVE•added 2024/08/06 1:15 p.m.•20 views

CVE-2024-33982

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'StudentID' parameter in '/AttendanceM...

7.1CVSS6.2AI score0.00085EPSS
CVE
CVE•added 2024/08/06 1:15 p.m.•20 views

CVE-2024-33985

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in '/course/index.php...

7.1CVSS6.2AI score0.00085EPSS
CVE
CVE•added 2024/08/06 1:15 p.m.•17 views

CVE-2024-33984

Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and 'YearLe...

7.1CVSS6.2AI score0.00085EPSS