Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2021-45866
Disclosure Date: March 29, 2022 (last updated February 23, 2025)
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php.
0
Attacker Value
Unknown
CVE-2021-45865
Disclosure Date: March 29, 2022 (last updated February 23, 2025)
A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functionality.
0
Attacker Value
Unknown
CVE-2021-45348
Disclosure Date: February 14, 2022 (last updated October 07, 2023)
An Arbitrary File Deletion vulnerability exists in SourceCodester Attendance Management System v1.0 via the csv parameter in admin/pageUploadCSV.php, which can cause a Denial of Service (crash).
0
Attacker Value
Unknown
CVE-2021-44598
Disclosure Date: December 26, 2021 (last updated February 23, 2025)
Attendance Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability. The value of the FirstRecord request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The attacker can access the system, by using the XSS-reflected method, and then can store information by injecting the admin account on this system.
0
Attacker Value
Unknown
CVE-2021-44280
Disclosure Date: December 01, 2021 (last updated February 23, 2025)
attendance management system 1.0 is affected by a SQL injection vulnerability in admin/incFunctions.php through the makeSafe function.
0
