Vulnerabilities

TI-2021-17376 CVE-2021-40261 · GHSA-4vx9-wfh3-p3v2

Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester CASAP…

LOW 28

Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester CASAP Automated Enrollment System 1.0 via the (1) user_username and (2) category parameters in save_class.php, the (3) firstname, (4) class, and…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2021-11-08 No fix listed CWE-79

TI-2021-08843 CVE-2021-27332 · GHSA-pfvj-g5fx-3g54

Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment…

LOW 29

Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the class_name parameter to update_class.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00845 Published 2021-07-22 No fix listed CWE-79

TI-2021-08085 CVE-2021-26223 · GHSA-w2pj-pfpp-7q8g

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0…

MEDIUM 45

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to view_pay.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01517 Published 2021-07-22 No fix listed CWE-89

TI-2021-08087 CVE-2021-26226 · GHSA-hwmv-rccr-7jhj

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0…

MEDIUM 45

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_user.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01476 Published 2021-07-22 No fix listed CWE-89

TI-2021-08088 CVE-2021-26227 · GHSA-jmwm-6r9h-qcvw

Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment…

LOW 29

Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the student information parameters to edit_stud.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00872 Published 2021-07-22 No fix listed CWE-79

TI-2021-08091 CVE-2021-26230 · GHSA-87x8-57ff-xgj9

Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment…

LOW 29

Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the user information to save_user.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00872 Published 2021-07-22 No fix listed CWE-79

TI-2021-08089 CVE-2021-26228 · GHSA-7fj4-63p6-8hxw

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0…

MEDIUM 46

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_class1.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01735 Published 2021-07-22 No fix listed CWE-89

TI-2021-08090 CVE-2021-26229 · GHSA-wgww-9qcv-fq3p

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0…

MEDIUM 45

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_stud.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01536 Published 2021-07-22 No fix listed CWE-89

TI-2021-08679 CVE-2021-27129 · GHSA-mhh4-ggqv-qpg6

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting (XSS)…

LOW 25

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting (XSS) vulnerability through the Students > Edit > ROUTE parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00614 Published 2021-04-15 No fix listed CWE-79

TI-2021-08079 CVE-2021-26201 · GHSA-pwm4-mvx6-674f

The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection…

MEDIUM 46

The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02179 Published 2021-02-15 No fix listed CWE-89

TI-2021-02307 CVE-2021-3294 · GHSA-x29m-vmxh-c2mf

CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in…

LOW 30

CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02884 Published 2021-02-08 No fix listed CWE-79

Vulnerabilities

Filters