TI-2026-04351 CVE-2026-4991 · GHSA-m3vr-rg3v-c5r5
QDOCS Smart School Management System Admission Enquiry enquiry cross site scripting
Priority LOW 23
A vulnerability was detected in QDOCS Smart School Management System up to 7.2.
Vulnerabilities
7 records
TI-2025-27457 CVE-2025-41107 · GHSA-frv9-vg6r-h5pf
Stored XSS in Smart School
Priority LOW 23
Stored Cross Site Scripting (XSS) vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/online_admission', wich affects the parameters 'firstname', 'lastname',…
TI-2025-37697 CVE-2025-60500 · GHSA-rh3g-ww52-5mx2
QDocs Smart School Management System 7.1 allows authenticated users with roles such as…
Priority LOW 34
QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypass file type restrictions in the media upload feature by abusing the alternate YouTube URL option.
TI-2024-08150 CVE-2024-8784 · GHSA-x6p2-rpj7-w423
QDocs Smart School Management System Chat mynewuser sql injection
Priority MEDIUM 57
A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0.
TI-2024-22650 CVE-2024-34240 · GHSA-h4rc-3vfw-rw96
QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in…
Priority MEDIUM 60
QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to adding or updating records.
TI-2023-05060 CVE-2023-5495 · GHSA-vv72-36rg-vcmc
QDocs Smart School HTTP POST Request sql injection
Priority MEDIUM 45
A vulnerability was found in QDocs Smart School 6.4.1.
TI-2020-18420 CVE-2020-36011 · GHSA-mxww-cpwx-rp55
A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management…
Priority LOW 23
A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Al…