5 matches found
CVE-2022-45224
CVE-2022-45224 is an XSS vulnerability affecting the Web-Based Student Clearance System v1.0, with the flaw in Admin/add-admin.php where a crafted payload in the txtfullname parameter can execute arbitrary scripts/HTML. The connected sources confirm the issue but do not provide exploit details or...
CVE-2022-45223
CVE-2022-45223 applies to Web-Based Student Clearance System v1.0, with a documented cross-site scripting (XSS) vulnerability in the /Admin/add-student.php endpoint. The issue allows injection of arbitrary scripts/HTML through the txtfullname parameter, as described across multiple sources. Vulne...
CVE-2022-45221
Summary : CVE-2022-45221 affects Web-Based Student Clearance System v1.0, with a cross-site scripting (XSS) vulnerability in changepassword.php. The issue allows insertion of arbitrary web scripts/HTML via the txtnew_password parameter, potentially leading to user interaction-based exploitation. ...
CVE-2022-43076
The vulnerability CVE-2022-43076 affects Web-Based Student Clearance System v1.0. A cross-site scripting (XSS) flaw exists in the /admin/edit-admin.php endpoint, exploitable by injecting crafted payloads into the txtemail parameter to execute arbitrary web scripts/HTML. The provided references co...
CVE-2022-43078
CVE-2022-43078 affects Web-Based Student Clearance System v1.0. The vulnerability is a cross-site scripting (XSS) in the /admin/add-fee.php endpoint, exploitable via a crafted payload in the cmddept parameter. Impact understood in sources as enabling execution of arbitrary web scripts or HTML by ...