Vulnerabilities

TI-2024-20890 CVE-2024-31610 · GHSA-r8hh-gm8p-9j5x

File Upload vulnerability in the function for employees to upload avatars in…

LOW 30

File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00447 Published 2024-04-25 No fix listed CWE-434

TI-2024-16690 CVE-2024-25313 · GHSA-wvp5-cmpq-4c47

Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the…

HIGH 73

Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacher_login.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2024-02-09 No fix listed CWE-287

TI-2024-16689 CVE-2024-25312 · GHSA-frf6-468r-3v33

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id'…

MEDIUM 47

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?id=5."

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00706 Published 2024-02-09 No fix listed CWE-89

TI-2024-16688 CVE-2024-25310 · GHSA-99pm-h8wp-8xpw

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id'…

MEDIUM 47

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00721 Published 2024-02-09 No fix listed CWE-89

TI-2024-16687 CVE-2024-25309 · GHSA-39v4-4m6h-c4rm

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass'…

HIGH 79

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00706 Published 2024-02-09 No fix listed CWE-89

TI-2024-16686 CVE-2024-25308 · GHSA-w9h2-c9f6-73r6

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name'…

HIGH 73

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00721 Published 2024-02-09 No fix listed CWE-89

TI-2024-16684 CVE-2024-25306 · GHSA-qxg7-vqqh-9gpf

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php".

HIGH 73

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php".

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00721 Published 2024-02-09 No fix listed CWE-89

TI-2024-16683 CVE-2024-25305 · GHSA-pp7c-w62w-w9jq

Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the…

HIGH 73

Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00944 Published 2024-02-09 No fix listed CWE-89

TI-2024-16682 CVE-2024-25304 · GHSA-vjvp-pp6v-gjcf

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."

HIGH 73

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00706 Published 2024-02-09 No fix listed CWE-89

Vulnerabilities

Filters