CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2021-45865
https://notcve.org/view.php?id=CVE-2021-45865
A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functionality. Se presenta una vulnerabilidad de carga de archivos en Sourcecodester Student Attendance Management System versión 1.0, por medio de la funcionalidad file upload • https://github.com/lohyt/Code-execution-via-vulnerable-file-upload-functionality-found-in-Student-Attendance-Management-Syste • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2021-45866
https://notcve.org/view.php?id=CVE-2021-45866
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php. Se presenta una vulnerabilidad de tipo Cross Site Scripting (XSS) Almacenado en Sourcecodester Student Attendance Management System versión 1.0, por medio del curso archivado en el archivo index.php • https://github.com/lohyt/XSS-in-Student-attendance-management • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •