Vulnerabilidades de Angeljudesuarez
CVEs publicadas que afetam produtos de Angeljudesuarez: 93 registro(s), com severidade, exploração e correções.
Student Management System 21Society Management System 15Covid Tracking System 9University Management System 9Open Source Job Portal 7College Management System 7Online Loan Management System 5Hostel Management System 4Online Voting System 4School Management System 4Payroll Management System 2Human Resource Management System 2Covid Tracking System Using Qr-code 1Online Clinic Management System 1Online Examination System 1Billing System 1
CVE-2026-4474
Média · 6.1
CWE-79 20/03/2026
itsourcecode University Management System admin_single_student_update.php cross site scripting
A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_single_student_update.php. This manipulation of the argument st_name causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used.
CVE-2026-4223
Crítica · 9.8
CWE-89 16/03/2026
itsourcecode Payroll Management System manage_employee.php sql injection
A vulnerability was identified in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /manage_employee.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
CVE-2026-3944
Crítica · 9.8
CWE-89 11/03/2026
itsourcecode University Management System att_add.php sql injection
A vulnerability was determined in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /att_add.php. This manipulation of the argument Name causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-3812
Média · 6.1
CWE-79 09/03/2026
itsourcecode Payroll Management System manage_employee_allowances.php cross site scripting
A vulnerability was determined in itsourcecode Payroll Management System 1.0. Affected is an unknown function of the file /manage_employee_allowances.php. This manipulation of the argument ID causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-3767
Alta · 8.8
CWE-89 08/03/2026
itsourcecode sanitize or validate this input teacher-attendance.php sql injection
A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php. Executing a manipulation of the argument teacher_id can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-3765
Crítica · 9.8
CWE-89 08/03/2026
itsourcecode University Management System att_single_view.php sql injection
A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /att_single_view.php. Such manipulation of the argument dt leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
CVE-2026-3760
Crítica · 9.8
CWE-89 08/03/2026
itsourcecode University Management System view_result.php sql injection
A vulnerability was detected in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /view_result.php. Performing a manipulation of the argument seme results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
CVE-2026-3747
Crítica · 9.8
CWE-89 08/03/2026
itsourcecode University Management System add_result.php sql injection
A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /add_result.php. Such manipulation of the argument subject leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
CVE-2026-3740
Crítica · 9.8
CWE-89 08/03/2026
itsourcecode University Management System admin_search_student.php sql injection
A weakness has been identified in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_search_student.php. This manipulation of the argument admin_search_student causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-3487
Alta · 7.2
CWE-89 03/03/2026
itsourcecode College Management System class-result.php sql injection
A vulnerability was found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/class-result.php. Performing a manipulation of the argument course_code results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
CVE-2026-3486
Alta · 7.2
CWE-89 03/03/2026
itsourcecode College Management System student-fee.php sql injection
A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument roll_no leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-3413
Crítica · 9.8
CWE-89 02/03/2026
itsourcecode University Management System admin_single_student.php sql injection
A flaw has been found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /admin_single_student.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
CVE-2026-3412
Média · 6.1
CWE-79 02/03/2026
itsourcecode University Management System att_single_view.php cross site scripting
A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /att_single_view.php. The manipulation of the argument dt results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used.
CVE-2026-3411
Crítica · 9.8
CWE-89 02/03/2026
itsourcecode University Management System admin_single_student_update.php sql injection
A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /admin_single_student_update.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVE-2026-3410
Crítica · 9.8
CWE-89 02/03/2026
itsourcecode Society Management System check_studid.php sql injection
A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/check_studid.php. Executing a manipulation of the argument student_id can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-3152
Crítica · 9.8
CWE-89 25/02/2026
itsourcecode College Management System teacher-salary.php sql injection
A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/teacher-salary.php. This manipulation of the argument teacher_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
CVE-2026-3151
Crítica · 9.8
CWE-89 25/02/2026
itsourcecode College Management System login.php sql injection
A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.
CVE-2026-3150
Alta · 8.8
CWE-89 25/02/2026
itsourcecode College Management System display-teacher.php sql injection
A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacher_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-3149
Alta · 8.8
CWE-89 25/02/2026
itsourcecode College Management System asign-single-student-subjects.php sql injection
A weakness has been identified in itsourcecode College Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/asign-single-student-subjects.php. Executing a manipulation of the argument course_code can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-2117
Crítica · 9.8
CWE-74 07/02/2026
Injeção de SQL no Society Management System 1.0 da itsourcecode
Foi identificada uma vulnerabilidade no itsourcecode Society Management System 1.0. O elemento afetado é uma função desconhecida do arquivo /admin/edit_activity.php. Ao manipular o argumento activity_id, ocorre injeção de SQL. O ataque pode ser iniciado remotamente. O exploit foi tornado público e pode ser utilizado.
CVE-2026-2116
Crítica · 9.8
CWE-74 07/02/2026
itsourcecode Society Management System: injeção de SQL em edit_expenses.php
Foi encontrada uma vulnerabilidade no itsourcecode Society Management System 1.0. Afetada está uma função desconhecida do arquivo /admin/edit_expenses.php. Tal manipulação do argumento expenses_id leva a injeção de SQL. É possível lançar o ataque remotamente. O exploit foi divulgado publicamente e pode ser usado.
CVE-2026-2115
Crítica · 9.8
CWE-74 07/02/2026
Injeção de SQL no Society Management System 1.0 da itsourcecode em delete_expenses.php
Foi identificada uma falha no itsourcecode Society Management System 1.0. Ela afeta algum processamento desconhecido do arquivo /admin/delete_expenses.php. Essa manipulação do argumento expenses_id causa injeção de SQL. É possível iniciar o ataque remotamente. O exploit foi publicado e pode ser utilizado.
CVE-2026-2114
Crítica · 9.8
CWE-74 07/02/2026
itsourcecode Society Management System - Injeção de SQL via admin_id (CVE-2026-2114)
Foi detectada uma vulnerabilidade no itsourcecode Society Management System 1.0. Ela afeta código não especificado do arquivo /admin/edit_admin.php. A manipulação do argumento admin_id resulta em injeção de SQL. O ataque pode ser realizado remotamente. O exploit está agora público e pode ser utilizado.
CVE-2026-1595
Crítica · 9.8
CWE-74 29/01/2026
Injeção de SQL no itsourcecode Society Management System via student_id (CVE-2026-1595)
Foi detectada uma vulnerabilidade no itsourcecode Society Management System 1.0. Ela afeta uma parte desconhecida do arquivo /admin/edit_student_query.php. A manipulação do argumento student_id resulta em injeção de SQL. O ataque pode ser executado remotamente. O exploit agora é público e pode ser utilizado.
CVE-2026-1594
Crítica · 9.8
CWE-74 29/01/2026
Injeção de SQL no add_expenses.php do Society Management System 1.0 da itsourcecode
Foi detectada uma vulnerabilidade de segurança no itsourcecode Society Management System 1.0. Afeta uma funcionalidade não especificada do arquivo /admin/add_expenses.php. A manipulação do argumento detail leva a injeção de SQL. A exploração remota do ataque é possível. O exploit foi divulgado publicamente e pode ser utilizado.