Vendors / code-projects Records 1481 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 76
CVSS high 33
Exploited now code-projects records in CISA KEV No code-projects vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 79
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.php.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00706 · Published 2024-02-09 · No fix listed CWE-89
Priority HIGH 73
Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacher_login.php.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00778 · Published 2024-02-09 · No fix listed CWE-287
Priority HIGH 73
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00721 · Published 2024-02-09 · No fix listed CWE-89
Priority HIGH 73
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php".
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00721 · Published 2024-02-09 · No fix listed CWE-89
Priority HIGH 73
Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00944 · Published 2024-02-09 · No fix listed CWE-89
Priority HIGH 73
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00706 · Published 2024-02-09 · No fix listed CWE-89
Priority MEDIUM 47
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?id=5."
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00706 · Published 2024-02-09 · No fix listed CWE-89
Priority MEDIUM 47
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00721 · Published 2024-02-09 · No fix listed CWE-89
Priority LOW 30
File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file.
CVSS 3.1 MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00447 · Published 2024-04-25 · No fix listed CWE-434
Open these records in search → All records by CVSS severity
76 33 1371 1 0
THREATIST.IORead the docs