CVE-2022-45224

CVE-2022-45224 is an XSS vulnerability affecting the Web-Based Student Clearance System v1.0, with the flaw in Admin/add-admin.php where a crafted payload in the txtfullname parameter can execute arbitrary scripts/HTML. The connected sources confirm the issue but do not provide exploit details or...

CVE-2022-3434

CVE-2022-3434 affects the SourceCodester Web-Based Student Clearance System. The vulnerability resides in the prepare function of /Admin/add-student.php, enabling cross-site scripting. The issue can be exploited remotely and the exploit has been disclosed publicly. Multiple sources corroborate th...

CVE-2022-3436

The CVE-2022-3436 entry concerns SourceCodester Web-Based Student Clearance System 1.0. Affected functionality is the edit-photo.php in the Photo Handler, where lack of input validation enables unrestricted file uploads. This allows remote attackers to upload arbitrary files, with the impact desc...

CVE-2022-3414

CVE-2022-3414 affects SourceCodester Web-Based Student Clearance System. The vulnerability resides in the POST Parameter Handler within /Admin/login.php, where manipulation of the txtusername argument enables SQL injection. It is exploitable remotely, and public exploit information has been discl...

CVE-2022-3733

SourceCodester Web-Based Student Clearance System is affected. The vulnerability is in Admin/edit-admin.php where manipulating the id parameter triggers a SQL injection. It can be exploited remotely and publicly disclosed; no remediation details are provided in the supplied documents.

CVE-2022-45223

CVE-2022-45223 applies to Web-Based Student Clearance System v1.0, with a documented cross-site scripting (XSS) vulnerability in the /Admin/add-student.php endpoint. The issue allows injection of arbitrary scripts/HTML through the txtfullname parameter, as described across multiple sources. Vulne...

CVE-2022-45221

Summary : CVE-2022-45221 affects Web-Based Student Clearance System v1.0, with a cross-site scripting (XSS) vulnerability in changepassword.php. The issue allows insertion of arbitrary web scripts/HTML via the txtnew_password parameter, potentially leading to user interaction-based exploitation. ...

CVE-2022-43078

CVE-2022-43078 affects Web-Based Student Clearance System v1.0. The vulnerability is a cross-site scripting (XSS) in the /admin/add-fee.php endpoint, exploitable via a crafted payload in the cmddept parameter. Impact understood in sources as enabling execution of arbitrary web scripts or HTML by ...

CVE-2022-43076

The vulnerability CVE-2022-43076 affects Web-Based Student Clearance System v1.0. A cross-site scripting (XSS) flaw exists in the /admin/edit-admin.php endpoint, exploitable by injecting crafted payloads into the txtemail parameter to execute arbitrary web scripts/HTML. The provided references co...