Product

Student-Management-System

3 briefs RSS

SQL Injection Vulnerability in Student-Management-System

An unauthenticated remote SQL injection vulnerability in the Student-Management-System Login component allows attackers to execute arbitrary database commands via the loginCheckTest.php endpoint.

1r 1t 1c 2w ago

high advisory

Cyber-III Student-Management-System Improper Authorization Vulnerability (CVE-2026-5642)

2 rules 1 TTP 1 CVE

CVE-2026-5642 allows a remote attacker to escalate privileges on a Cyber-III Student-Management-System by manipulating the Name argument in an HTTP POST request to /viva/update.php due to improper authorization.

Student-Management-System CVE-2026-5642 privilege-escalation web-application

2r 1t 1c Jan 21, 2024

high advisory

Cyber-III Student-Management-System SQL Injection Vulnerability

2 rules 2 TTPs 1 CVE

A remote SQL injection vulnerability (CVE-2026-5669) exists in the /login.php file of Cyber-III Student-Management-System due to improper handling of the Password parameter, potentially allowing attackers to manipulate the system's database remotely.

Student-Management-System sql-injection web-application cve-2026-5669

2r 2t 1c Jan 2, 2024