CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-5367 – Kashipara College Management System each_extracurricula_activities.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-5367
A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file each_extracurricula_activities.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System%20-%20xss/College%20Management%20System%20-%20vuln%201.pdf https://vuldb.com/?ctiid.266279 https://vuldb.com/?id.266279 https://vuldb.com/?submit.343447 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4905 – Kashipara College Management System view_students_each_detail.php sql injection
https://notcve.org/view.php?id=CVE-2024-4905
A vulnerability classified as critical has been found in Kashipara College Management System 1.0. Affected is an unknown function of the file view_students_each_detail.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%201.pdf https://vuldb.com/?ctiid.264438 https://vuldb.com/?id.264438 https://vuldb.com/?submit.332543 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4808 – Kashipara College Management System delete_faculty.php sql injection
https://notcve.org/view.php?id=CVE-2024-4808
A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. Affected is an unknown function of the file delete_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%2011.pdf https://vuldb.com/?ctiid.263928 https://vuldb.com/?id.263928 https://vuldb.com/?submit.332565 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4807 – Kashipara College Management System delete_user.php sql injection
https://notcve.org/view.php?id=CVE-2024-4807
A vulnerability, which was classified as critical, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of the file delete_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%2010.pdf https://vuldb.com/?ctiid.263927 https://vuldb.com/?id.263927 https://vuldb.com/?submit.332564 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4806 – Kashipara College Management System each_extracurricula_activities.php sql injection
https://notcve.org/view.php?id=CVE-2024-4806
A vulnerability classified as critical was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file each_extracurricula_activities.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System/College%20Management%20System%20-%20vuln%209.pdf https://vuldb.com/?ctiid.263926 https://vuldb.com/?id.263926 https://vuldb.com/?submit.332557 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •