Vulnerabilities

TI-2022-04335 CVE-2022-4739 · GHSA-9j8v-34vr-gvpr

SourceCodester School Dormitory Management System Admin Login sql injection

MEDIUM 43

A vulnerability classified as critical was found in SourceCodester School Dormitory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00524 Published 2022-12-25 No fix listed CWE-89

TI-2022-12671 CVE-2022-30513 · GHSA-xmhr-j5mx-g7hv

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting…

LOW 34

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:125

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03635 Published 2022-05-27 No fix listed CWE-79

TI-2022-12669 CVE-2022-30511 · GHSA-g7v9-p5c5-r49m

School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/view_details.php:4.

MEDIUM 48

School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/view_details.php:4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03616 Published 2022-05-27 No fix listed CWE-89

TI-2022-12672 CVE-2022-30514 · GHSA-r6jx-x4pp-mmx4

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting…

LOW 34

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:126.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03635 Published 2022-05-27 No fix listed CWE-79

TI-2022-12670 CVE-2022-30512 · GHSA-v4vr-cg76-cj9v

School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/payment_history.php:31.

MEDIUM 54

School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/payment_history.php:31.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09706 Published 2022-05-27 No fix listed CWE-89

TI-2022-12668 CVE-2022-30510 · GHSA-8h2p-v4rc-vh39

School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/daily_collection_report.php:59.

MEDIUM 49

School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/daily_collection_report.php:59.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03789 Published 2022-05-27 No fix listed CWE-89

TI-2022-12969 CVE-2022-30886 · GHSA-jxmc-5jm4-w9r5

School Dormitory Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 46

School Dormitory Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /dms/admin/reports/daily_collection_report.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02025 Published 2022-05-20 No fix listed CWE-89

Vulnerabilities

Filters

SourceCodester School Dormitory Management System Admin Login sql injection

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting…

School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/view_details.php:4.

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting…

School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/payment_history.php:31.

School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/daily_collection_report.php:59.

School Dormitory Management System v1.0 was discovered to contain a SQL injection…