CVSS: 5.1EPSS: 0%CPEs: 1EXPL: 2CVE-2024-6807 – SourceCodester Student Study Center Desk Management System HTTP POST Request Users.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-6807
A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sscdms/classes/Users.php?f=save of the component HTTP POST Request Handler. The manipulation of the argument firstname/middlename/lastname/username leads to cross site scripting. The attack may be launched remotely. • https://reports-kunull.vercel.app/CVE%20research/2024/cve-2024-6807 https://vuldb.com/?ctiid.271706 https://vuldb.com/?id.271706 https://vuldb.com/?submit.374853 https://reports.kunull.net/CVEs/2024/CVE-2024-6807 https://www.sourcecodester.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-6732 – SourceCodester Student Study Center Desk Management System Users.php sql injection
https://notcve.org/view.php?id=CVE-2024-6732
A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. This vulnerability affects unknown code of the file /sscdms/classes/Users.php?f=save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. • https://reports-kunull.vercel.app/CVE%20research/2024/cve-2024-6732 https://vuldb.com/?ctiid.271450 https://vuldb.com/?id.271450 https://vuldb.com/?submit.374370 https://reports.kunull.net/CVEs/2024/CVE-2024-6732 https://www.sourcecodester.com • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-6731 – SourceCodester Student Study Center Desk Management System Master.php sql injection
https://notcve.org/view.php?id=CVE-2024-6731
A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. This affects an unknown part of the file /Master.php?f=save_student. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. • https://reports-kunull.vercel.app/CVE%20research/2024/cve-2024-6731 https://vuldb.com/?ctiid.271449 https://vuldb.com/?id.271449 https://vuldb.com/?submit.374362 https://reports.kunull.net/CVEs/2024/CVE-2024-6731 https://www.sourcecodester.com • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-36317
https://notcve.org/view.php?id=CVE-2023-36317
Cross Site Scripting (XSS) vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL. Una vulnerabilidad de Cross-Site Scripting (XSS) en sourcecodester Student Study Center Desk Management System v1.0 permite a los atacantes ejecutar código arbitrario a través de una solicitud GET a la URL de la aplicación web. • https://github.com/oye-ujjwal/CVE/blob/main/CVE-2023-36317 https://www.sourcecodester.com https://www.sourcecodester.com/php/16298/student-study-center-desk-management-system-using-php-oop-and-mysql-db-free-source-code • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-29985
https://notcve.org/view.php?id=CVE-2023-29985
Sourcecodester Student Study Center Desk Management System v1.0 admin\reports\index.php#date_from has a SQL Injection vulnerability. • https://liaorj.github.io/2023/03/17/admin-reports-date-from-has-sql-injection-vulnerability/#more • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •