CVE-2023-27214

CVE-2023-27214 affects Online Student Management System v1.0, with multiple SQL injection vulnerabilities exploitable via the fromdate and todate parameters in /eduauth/student/between-date-reprtsdetails.php. Root cause: inadequate input handling allowing injection into SQL queries. Reported impa...

CVE-2023-27213

CVE-2023-27213 affects Online Student Management System v1.0. The vulnerability is a SQL injection in the searchdata parameter of /eduauth/student/search.php, enabling unauthorized access to data due to improper input handling. The CVSS indicates high impact (Confidentiality/Integrity/Availabilit...

CVE-2023-1099

SourceCodester Online Student Management System 1.0 has a SQL injection vulnerability in eduauth/edit-class-detail.php caused by unsafely handling the editid parameter. The issue can be exploited remotely and the exploit has been disclosed publicly. Affected component: the file eduauth/edit-class...

CVE-2023-1397

CVE-2023-1397 affects SourceCodester Online Student Management System v1.0. The vulnerability is in profile.php where manipulating the adminname parameter triggers a cross-site scripting (XSS) flaw. It can be exploited remotely and, per sources, the exploit has been disclosed publicly. Impact is ...

CVE-2024-6801

CVE-2024-6801 affects SourceCodester Online Student Management System 1.0. The issue is in the handling of the file parameter image on /add-students.php, where manipulation leads to unrestricted file upload. This allows remote attackers to upload arbitrary files, with potential for high-impact co...