Vulnerabilities

TI-2022-22983 CVE-2022-46502 · GHSA-fq64-rwr7-qr5w

Online Student Enrollment System v1.0 was discovered to contain a SQL injection…

HIGH 82

Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /student_enrollment/admin/login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13732 Published 2023-01-13 No fix listed CWE-89

TI-2022-22984 CVE-2022-46503 · GHSA-p64w-6wm7-vxhx

A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online…

MEDIUM 58

A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name para…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00404 Published 2023-01-12 No fix listed CWE-79

Vulnerabilities

Filters

Online Student Enrollment System v1.0 was discovered to contain a SQL injection…

A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online…