CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-6191 – itsourcecode Student Management System Login Page login.php sql injection
https://notcve.org/view.php?id=CVE-2024-6191
A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/HryspaHodor/CVE/issues/3 https://vuldb.com/?ctiid.269163 https://vuldb.com/?id.269163 https://vuldb.com/?submit.359009 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-5381 – itsourcecode Student Information Management System view.php sql injection
https://notcve.org/view.php?id=CVE-2024-5381
A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by this vulnerability is an unknown functionality of the file view.php. The manipulation of the argument studentId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/Lanxiy7th/lx_CVE_report-/issues/2 https://vuldb.com/?ctiid.266293 https://vuldb.com/?id.266293 https://vuldb.com/?submit.344447 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •