Simple School Managment System
CVEs (15)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-25310 | Hig | 0.57 | 8.8 | 0.01 | Feb 9, 2024 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5." | ||
| CVE-2024-25313 | Hig | 0.57 | 8.8 | 0.01 | Feb 9, 2024 | Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacher_login.php. | ||
| CVE-2024-25312 | Hig | 0.57 | 8.8 | 0.01 | Feb 9, 2024 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?id=5." | ||
| CVE-2024-25309 | Hig | 0.57 | 8.8 | 0.01 | Feb 9, 2024 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.php. | ||
| CVE-2024-25308 | Hig | 0.57 | 8.8 | 0.01 | Feb 9, 2024 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php. | ||
| CVE-2024-25306 | Hig | 0.57 | 8.8 | 0.01 | Feb 9, 2024 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php". | ||
| CVE-2024-25305 | Hig | 0.57 | 8.8 | 0.01 | Feb 9, 2024 | Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php. | ||
| CVE-2024-25304 | Hig | 0.57 | 8.8 | 0.01 | Feb 9, 2024 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php." | ||
| CVE-2024-31610 | Med | 0.41 | 6.3 | 0.00 | Apr 25, 2024 | File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file. | ||
| CVE-2023-3339 | Med | 0.41 | 6.3 | 0.01 | Jun 21, 2023 | A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument test_id leads to sql injection. The attack can… | ||
| CVE-2023-3310 | Med | 0.41 | 6.3 | 0.01 | Jun 18, 2023 | A vulnerability, which was classified as critical, has been found in code-projects Agro-School Management System 1.0. Affected by this issue is some unknown functionality of the file loaddata.php. The manipulation of the argument subject/course leads to sql injection. The attack… | ||
| CVE-2023-3094 | Med | 0.41 | 6.3 | 0.01 | Jun 4, 2023 | A vulnerability classified as critical has been found in code-projects Agro-School Management System 1.0. Affected is the function doUpdateQuestion of the file btn_functions.php. The manipulation of the argument question_id leads to sql injection. It is possible to launch the… | ||
| CVE-2023-3062 | Med | 0.41 | 6.3 | 0.01 | Jun 2, 2023 | A vulnerability was found in code-projects Agro-School Management System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument password leads to sql injection. It is possible to launch the attack… | ||
| CVE-2023-3061 | Med | 0.41 | 6.3 | 0.01 | Jun 2, 2023 | A vulnerability was found in code-projects Agro-School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file btn_functions.php of the component Attachment Image Handler. The manipulation leads to unrestricted upload. The attack… | ||
| CVE-2023-3060 | Low | 0.23 | 3.5 | 0.01 | Jun 2, 2023 | A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as problematic. This vulnerability affects the function doAddQuestion of the file btn_functions.php. The manipulation of the argument Question leads to cross site scripting. The… |
- risk 0.57cvss 8.8epss 0.01
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."
- risk 0.57cvss 8.8epss 0.01
Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacher_login.php.
- risk 0.57cvss 8.8epss 0.01
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?id=5."
- risk 0.57cvss 8.8epss 0.01
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.php.
- risk 0.57cvss 8.8epss 0.01
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php.
- risk 0.57cvss 8.8epss 0.01
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php".
- risk 0.57cvss 8.8epss 0.01
Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php.
- risk 0.57cvss 8.8epss 0.01
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."
- risk 0.41cvss 6.3epss 0.00
File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file.
- risk 0.41cvss 6.3epss 0.01
A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument test_id leads to sql injection. The attack can…
- risk 0.41cvss 6.3epss 0.01
A vulnerability, which was classified as critical, has been found in code-projects Agro-School Management System 1.0. Affected by this issue is some unknown functionality of the file loaddata.php. The manipulation of the argument subject/course leads to sql injection. The attack…
- risk 0.41cvss 6.3epss 0.01
A vulnerability classified as critical has been found in code-projects Agro-School Management System 1.0. Affected is the function doUpdateQuestion of the file btn_functions.php. The manipulation of the argument question_id leads to sql injection. It is possible to launch the…
- risk 0.41cvss 6.3epss 0.01
A vulnerability was found in code-projects Agro-School Management System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument password leads to sql injection. It is possible to launch the attack…
- risk 0.41cvss 6.3epss 0.01
A vulnerability was found in code-projects Agro-School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file btn_functions.php of the component Attachment Image Handler. The manipulation leads to unrestricted upload. The attack…
- risk 0.23cvss 3.5epss 0.01
A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as problematic. This vulnerability affects the function doAddQuestion of the file btn_functions.php. The manipulation of the argument Question leads to cross site scripting. The…