CVE-2021-45865

CVE-2021-45865 concerns the SourceCodester Student Attendance Management System v1.0 and centers on the file upload feature. Multiple connected sources describe a vulnerability caused by the application’s lack of validation for uploaded files, which can be exploited to upload malicious files and ...

CVE-2022-4052

CVE-2022-4052 affects the Student Attendance Management System. The vulnerability is a SQL injection in the Id parameter of the file /Admin/createClass.php caused by unsanitized input, allowing remote exploitation. Several connected sources corroborate the problem and classify it as critical with...

CVE-2021-45866

CVE-2021-45866 affects Sourcecodester Student Attendance Management System 1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) in the couse field of index.php, arising from insufficient input validation/output handling. Reported across multiple feeds (NVD/CNVD/CNNVD) with CVSS-3.1 base ...

CVE-2022-4053

CVE-2022-4053 affects the Student Attendance Management System. The vulnerability is in the createClass.php file, where manipulating the className argument can trigger a cross-site scripting (XSS) flaw. The issue is exploitable remotely, and the exploit has been disclosed publicly (VDB-213846). C...

CVE-2023-41524

The Student Attendance Management System v1 is vulnerable to a SQL injection flaw caused by the incorrect manipulation of the username parameter at the index.php API endpoint. An attacker could exploit this to perform unauthorized database operations. To mitigate this risk, it is recommended to s...

CVE-2023-41520

The Student Attendance Management System v1 contains multiple SQL injection vulnerabilities located in the createClassArms.php file. The root cause is the incorrect manipulation and lack of sanitization of the classId and classArmName parameters when used in SQL queries. Exploitation could allow ...

CVE-2023-41519

The Student Attendance Management System v1 contains a cross-site scripting (XSS) vulnerability located in the createSessionTerm.php file. The root cause is the improper neutralization of input via the sessionName parameter, which allows for the injection of malicious scripts. As a remediation, i...

CVE-2023-41521

Student Attendance Management System v1 contains multiple SQL injection vulnerabilities located in the createSessionTerm.php file. The root cause is the incorrect manipulation and lack of sanitization of the id, termId, and sessionName parameters. Successful exploitation could allow an attacker t...

CVE-2023-41523

The Student Attendance Management System v1 contains a SQL injection vulnerability (CWE-89) within the createClassTeacher.php file. The root cause is the incorrect manipulation and lack of sanitization of the emailAddress parameter when used in SQL queries. This flaw allows an attacker to potenti...

CVE-2023-41522

The Student Attendance Management System v1 is vulnerable to multiple SQL injection flaws located in the createStudents.php file. The root cause is the incorrect manipulation and lack of sanitization for the Id , firstname , and admissionNumber parameters. These vulnerabilities could allow an att...