Vulnerabilities

TI-2024-06304 CVE-2024-6801 · GHSA-fp43-wwj5-2hhj

SourceCodester Online Student Management System add-students.php unrestricted upload

MEDIUM 57

A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00758 Published 2024-07-17 No fix listed CWE-434

TI-2023-01321 CVE-2023-1397 · GHSA-2hx8-w2c3-vxv7

SourceCodester Online Student Management System profile.php cross site scripting

LOW 28

A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00562 Published 2023-03-14 No fix listed CWE-79

TI-2023-11980 CVE-2023-27214 · GHSA-p4r4-hgwq-m953

Online Student Management System v1.0 was discovered to contain multiple SQL injection…

MEDIUM 50

Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00788 Published 2023-03-09 No fix listed CWE-89

TI-2023-11979 CVE-2023-27213 · GHSA-529h-6hcr-rhjg

Online Student Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 50

Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /eduauth/student/search.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00788 Published 2023-03-09 No fix listed CWE-89

TI-2023-01041 CVE-2023-1099 · GHSA-jr8g-3jc5-pr3p

SourceCodester Online Student Management System edit-class-detail.php sql injection

HIGH 75

A vulnerability was found in SourceCodester Online Student Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00653 Published 2023-02-28 No fix listed CWE-89