CVSS: 5.1EPSS: 0%CPEs: 1EXPL: 2CVE-2024-6807 – SourceCodester Student Study Center Desk Management System HTTP POST Request Users.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-6807
A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sscdms/classes/Users.php?f=save of the component HTTP POST Request Handler. The manipulation of the argument firstname/middlename/lastname/username leads to cross site scripting. The attack may be launched remotely. • https://reports-kunull.vercel.app/CVE%20research/2024/cve-2024-6807 https://vuldb.com/?ctiid.271706 https://vuldb.com/?id.271706 https://vuldb.com/?submit.374853 https://reports.kunull.net/CVEs/2024/CVE-2024-6807 https://www.sourcecodester.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2024-6801 – SourceCodester Online Student Management System add-students.php unrestricted upload
https://notcve.org/view.php?id=CVE-2024-6801
A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0. This issue affects some unknown processing of the file /add-students.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/aaajuna/demo/issues/1 https://vuldb.com/?ctiid.271703 https://vuldb.com/?id.271703 https://vuldb.com/?submit.374774 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-41616
https://notcve.org/view.php?id=CVE-2023-41616
A reflected cross-site scripting (XSS) vulnerability in the Search Student function of Student Management System v1.2.3 and before allows attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload. Una vulnerabilidad de Cross-Site Scripting (XSS) reflejada en la función Buscar Estudiantes del Student Management System v1.2.3 y anteriores permite a los atacantes ejecutar Javascript arbitrario en el contexto del navegador de un usuario víctima a través de un payload manipulado. • https://medium.com/%40guravtushar231/reflected-xss-in-admin-panel-7a459dcb9476 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-36317
https://notcve.org/view.php?id=CVE-2023-36317
Cross Site Scripting (XSS) vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL. Una vulnerabilidad de Cross-Site Scripting (XSS) en sourcecodester Student Study Center Desk Management System v1.0 permite a los atacantes ejecutar código arbitrario a través de una solicitud GET a la URL de la aplicación web. • https://github.com/oye-ujjwal/CVE/blob/main/CVE-2023-36317 https://www.sourcecodester.com https://www.sourcecodester.com/php/16298/student-study-center-desk-management-system-using-php-oop-and-mysql-db-free-source-code • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-3008 – ningzichun Student Management System login.php sql injection
https://notcve.org/view.php?id=CVE-2023-3008
A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/student-management-system/sql_inject.md https://vuldb.com/?ctiid.230355 https://vuldb.com/?id.230355 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •