CVSS: 5.1EPSS: 0%CPEs: 1EXPL: 0CVE-2025-5984 – SourceCodester Online Student Clearance System add-fee.php cross site scripting
https://notcve.org/view.php?id=CVE-2025-5984
10 Jun 2025 — A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/add-fee.php. The manipulation of the argument txtamt leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://vuldb.com/?ctiid.311899 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2025-4887 – SourceCodester Online Student Clearance System cross-site request forgery
https://notcve.org/view.php?id=CVE-2025-4887
18 May 2025 — A vulnerability, which was classified as problematic, has been found in SourceCodester Online Student Clearance System 1.0. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/ClausiusFan/CVE/blob/main/CVE_2.md • CWE-352: Cross-Site Request Forgery (CSRF) CWE-862: Missing Authorization •
CVSS: 6.9EPSS: 0%CPEs: 1EXPL: 1CVE-2025-4807 – SourceCodester Online Student Clearance System exposure of information through directory listing
https://notcve.org/view.php?id=CVE-2025-4807
16 May 2025 — A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/laifeng-boy/cve/issues/2 • CWE-548: Exposure of Information Through Directory Listing CWE-552: Files or Directories Accessible to External Parties •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2025-4470 – SourceCodester Online Student Clearance System add-student.php cross site scripting
https://notcve.org/view.php?id=CVE-2025-4470
09 May 2025 — A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-student.php. The manipulation of the argument Fullname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://vuldb.com/?id.308089 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2025-4469 – SourceCodester Online Student Clearance System add-admin.php cross site scripting
https://notcve.org/view.php?id=CVE-2025-4469
09 May 2025 — A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://vuldb.com/?id.308088 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-4468 – SourceCodester Online Student Clearance System edit-photo.php unrestricted upload
https://notcve.org/view.php?id=CVE-2025-4468
09 May 2025 — A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument userImage leads to unrestricted upload. The attack may be initiated remotely. • https://vuldb.com/?id.308087 • CWE-284: Improper Access Control CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-4467 – SourceCodester Online Student Clearance System edit-admin.php sql injection
https://notcve.org/view.php?id=CVE-2025-4467
09 May 2025 — A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack can be initiated remotely. • https://vuldb.com/?id.308086 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2025-4331 – SourceCodester Online Student Clearance System login.php sql injection
https://notcve.org/view.php?id=CVE-2025-4331
06 May 2025 — A vulnerability classified as critical was found in SourceCodester Online Student Clearance System 1.0. This vulnerability affects unknown code of the file /Admin/login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/cybersharmaji/Online-Student-Clearance-System/blob/main/sql_injection_time.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •