Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

onlinegrades / online_grades CVEs

Beta · best-effort

5 CVEs tagged to onlinegrades / online_grades — 0 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to onlinegrades vendor archive

CVE-2009-2598

Published Jul 27, 2009

Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to execute arbitrary SQL commands via the key parameter in a rese…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2009-2037

Published Jun 12, 2009

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when register_globals is enabled, allow remote attackers to inclu…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2009-0453

Published Feb 10, 2009

Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2009-0452

Published Feb 10, 2009

Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2009-0479

Published Feb 9, 2009

Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pword para…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1