Student Information System vulnerabilities
5 known vulnerabilities in Student Information System from code-projects. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
Student Information System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can lead to sql injection. The attack may be performed from remot
- 8.8 High severity
Student Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /editprofile.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been made public and co
- 9.8 Critical severity
Student Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has be
- 9.8 Critical severity
Student Information System: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit h
- 9.8 Critical severity
Student Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The expl