Vulnerabilities

TI-2024-04688 CVE-2024-5047 · GHSA-x5m5-jxc3-3g5c

SourceCodester Student Management System controller.php unrestricted upload

LOW 32

A vulnerability classified as critical has been found in SourceCodester Student Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00947 Published 2024-05-17 No fix listed CWE-434

TI-2023-02816 CVE-2023-3008 · GHSA-4844-xhp4-vx37

ningzichun Student Management System login.php sql injection

HIGH 81

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00795 Published 2023-05-31 No fix listed CWE-89

TI-2023-02815 CVE-2023-3007 · GHSA-9q2q-93hf-g3jq

ningzichun Student Management System Password Reset resetPassword.php password recovery

MEDIUM 44

A vulnerability was found in ningzichun Student Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01031 Published 2023-05-31 No fix listed CWE-640

TI-2021-12832 CVE-2021-33371 · GHSA-q57p-78xr-2gv3

A stored cross-site scripting (XSS) vulnerability in /nav_bar_action.php of Student…

LOW 25

A stored cross-site scripting (XSS) vulnerability in /nav_bar_action.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-07-27 No fix listed CWE-79

TI-2020-14738 CVE-2020-23935 · GHSA-qhv8-qr2f-xwvq

Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via…

MEDIUM 58

Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)".

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15926 Published 2020-08-20 No fix listed CWE-89