Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

Priority LOW 28

Cross Site Scripting (XSS) vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the page or class_month parameter in the /php-attendance/…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00615 Published 2024-02-29 No fix listed CWE-79
Priority HIGH 82

SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the student_form.php and the class_form.php pages.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01192 Published 2024-02-29 No fix listed CWE-94