Unrated severityNVD Advisory· Published Feb 7, 2014· Updated Jun 17, 2026
CVE-2014-1914
CVE-2014-1914
Description
Multiple cross-site scripting (XSS) vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to inject arbitrary web script or HTML via the (1) topic parameter to sw/add_topic.php or (2) nick parameter to sw/chat/message.php.
Affected products
2- cpe:2.3:a:doug_poulin:command_school_student_management_system:1.06.01:*:*:*:*:*:*:*
- Range: <=1.06.01
Patches
Vulnerability mechanics
References
6- packetstormsecurity.com/files/124708/Command-School-Student-Management-System-1.06.01-SQL-Injection-CSRF-XSS.htmlnvdExploit
- osvdb.org/101891nvd
- osvdb.org/101892nvd
- www.securityfocus.com/bid/64707nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/90178nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/90179nvd
News mentions
0No linked articles in our index yet.