Vulnerabilities > Advanced School Management System Project > Advanced School Management System > Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-06-15	CVE-2022-32379	SQL Injection vulnerability in Advanced School Management System Project Advanced School Management System 1.0 itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_parents_profile.php?my_index=. network low complexity advanced-school-management-system-project CWE-89	6.5
2022-06-15	CVE-2022-32380	SQL Injection vulnerability in Advanced School Management System Project Advanced School Management System 1.0 itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_student_subject.php?index=. network low complexity advanced-school-management-system-project CWE-89	6.5
2022-06-15	CVE-2022-32381	SQL Injection vulnerability in Advanced School Management System Project Advanced School Management System 1.0 itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_admin_profile.php?my_index=. network low complexity advanced-school-management-system-project CWE-89	6.5
2022-06-15	CVE-2022-32433	Unrestricted Upload of File with Dangerous Type vulnerability in Advanced School Management System Project Advanced School Management System 1.0 itsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via ip/school/view/all_teacher.php. network low complexity advanced-school-management-system-project CWE-434	6.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.