CVE-2021-40261
Published Nov 8, 2021Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester CASAP Automated Enrollment System 1.0 via the (1) user_username and (2) category parameters in save_cla…
Vendor archive
casap_automated_enrollment_system_project CVEs
Beta · best-effort11 CVEs tagged to vendor casap_automated_enrollment_system_project — 5 Critical, 0 High, 6 Medium, 0 Low, 0 Unrated.
CVE-2021-27332
Published Jul 22, 2021Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the class_nam…
CVE-2021-26223
Published Jul 22, 2021SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to view_pay…
CVE-2021-26226
Published Jul 22, 2021SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_use…
CVE-2021-26230
Published Jul 22, 2021Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the user info…
CVE-2021-26229
Published Jul 22, 2021SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_stu…
CVE-2021-26228
Published Jul 22, 2021SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_cla…
CVE-2021-26227
Published Jul 22, 2021Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the student i…
CVE-2021-27129
Published Apr 15, 2021CASAP Automated Enrollment System version 1.0 contains a cross-site scripting (XSS) vulnerability through the Students > Edit > ROUTE parameter.
CVE-2021-26201
Published Feb 15, 2021The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL…
CVE-2021-3294
Published Feb 9, 2021CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website.
Showing 1-11 of 11 CVEsPage 1 of 1