Vulnerabilities

TI-2021-20498 CVE-2021-45348 · GHSA-q574-5pq6-5m77

An Arbitrary File Deletion vulnerability exists in SourceCodester Attendance Management…

LOW 35

An Arbitrary File Deletion vulnerability exists in SourceCodester Attendance Management System v1.0 via the csv parameter in admin/pageUploadCSV.php, which can cause a Denial of Service (crash).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0093 Published 2022-02-14 No fix listed

TI-2021-20165 CVE-2021-44598 · GHSA-988v-mhrc-mc5v

Attendance Management System 1.0 is affected by a Cross Site Scripting (XSS)…

LOW 29

Attendance Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00746 Published 2021-12-26 No fix listed CWE-79

TI-2021-19944 CVE-2021-44280 · GHSA-f98m-xwh6-wgfq

attendance management system 1.0 is affected by a SQL injection vulnerability in…

MEDIUM 46

attendance management system 1.0 is affected by a SQL injection vulnerability in admin/incFunctions.php through the makeSafe function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01989 Published 2021-12-01 No fix listed CWE-89

Vulnerabilities

Filters

An Arbitrary File Deletion vulnerability exists in SourceCodester Attendance Management…

Attendance Management System 1.0 is affected by a Cross Site Scripting (XSS)…

attendance management system 1.0 is affected by a SQL injection vulnerability in…