Oretnom23 Simple Student Attendance System 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:oretnom23:simple_student_attendance_system:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Oretnom23 (bb7583fb-f029-599f-a8a3-33d64769aa1f) |
|---|---|
| Product | Simple Student Attendance System (6a2f280f-665f-5986-affd-4a74e5f2c9fd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6212 |
vulnerable | 2026-06-08 06:58:18.252230 |
SourceCodester Simple Student Attendance System student_form.php get_student cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function get_student of the file student_form.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269276.
Published: 2024-06-21T00:00:06.024Z
Updated: 2024-08-01T21:33:05.336Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25551 |
vulnerable | 2026-06-08 06:31:23.058414 |
Details available
Cross Site Scripting (XSS) vulnerability in sourcecodester Simple Student Attendance System v1.0 allows attackers to execute arbitrary code via crafted GET request to web application URL.
Published: 2024-03-03T00:00:00.000Z
Updated: 2024-10-29T20:14:18.095Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1923 |
vulnerable | 2026-06-08 06:27:15.038282 |
SourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by this issue is the function delete_class/delete_student of the file /ajax-api.php of the component List of Classes Page. The manipulation of the argument id with the input 1337'+or+1=1;--+ leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-254858 is the identifier assigned to this vulnerability.
Published: 2024-02-27T16:00:06.873Z
Updated: 2024-08-01T18:56:22.342Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1834 |
vulnerable | 2026-06-08 06:27:14.651697 |
SourceCodester Simple Student Attendance System ?page=attendance&class_id=1 cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&class_id=1. The manipulation of the argument class_date with the input 2024-02-23%22%3E%3Cscript%3Ealert(1)%3C/script%3E leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254625 was assigned to this vulnerability.
Published: 2024-02-23T20:00:11.202Z
Updated: 2024-08-01T18:56:21.075Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7058 |
vulnerable | 2026-06-08 06:21:56.878226 |
SourceCodester Simple Student Attendance System path traversal
MEDIUM (6.3)
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument page leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-248749 was assigned to this vulnerability.
Published: 2023-12-22T04:31:04.566Z
Updated: 2025-04-17T20:30:00.818Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6771 |
vulnerable | 2026-06-08 06:21:55.777642 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6658 |
vulnerable | 2026-06-08 06:21:55.229019 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6657 |
vulnerable | 2026-06-08 06:21:55.228436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6619 |
vulnerable | 2026-06-08 06:21:55.117860 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6618 |
vulnerable | 2026-06-08 06:21:55.117302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6617 |
vulnerable | 2026-06-08 06:21:55.116715 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6616 |
vulnerable | 2026-06-08 06:21:55.115918 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51802 |
vulnerable | 2026-06-08 06:17:54.049089 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51801 |
vulnerable | 2026-06-08 06:17:54.048485 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.