These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A vulnerability was found in the ningzichun student-management-system up to version 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. The issue affects the function echo in the file admin/fun/addLog.php, where manipulation of the argument reason/detail leads to cross-site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed early throug [truncated]
A vulnerability was found in the ningzichun student-management-system up to version 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. The issue affects an unknown functionality in the file example_lite.sql, allowing for the use of default credentials. This vulnerability can be exploited remotely. The project was informed but has not yet responded. Defenders should assess their exposure and verify the presence of [truncated]
A vulnerability was detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function. Performing a manipulation results in cross-site request forgery. It is possible to initiate the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The project [truncated]
A weakness was identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown function of the file admin/fun/getStudent.php. The manipulation of the argument sid causes authorization bypass. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed [truncated]
A vulnerability was found in the ningzichun Student Management System, specifically in the session_start function of the login.php file, which results in session fixation. The attack can be launched remotely. The exploit has been made public and could be used. However, the product does not use versioning, making it difficult to determine affected and unaffected releases.
A vulnerability was found in the ningzichun Student Management System, specifically in the Backup Handler component. The vulnerability leads to information disclosure and can be initiated remotely. The project has been informed but has not responded yet. The vulnerability was disclosed publicly, and an issue report was submitted to the project. However, no version details of affected or updated releases a [truncated]