Search results

Reflected XSS and Unauthorized Access in /admin/class schedule/delete_batch.php

Status: Open.

#242 In Cyber-III/Student-Management-System;

· duckpigdog opened on Mar 23, 2026

Unrestricted File Upload Leading to Remote Code Execution (RCE) in /AssignmentSection/submission/upload.php

Status: Open.

#241 In Cyber-III/Student-Management-System;

· duckpigdog opened on Mar 23, 2026

Time-Based Blind SQL Injection in /login.php

Status: Open.

#240 In Cyber-III/Student-Management-System;

· duckpigdog opened on Mar 23, 2026

Reflected Cross-Site Scripting (XSS) in /admin/Add notice/add notice.php via $_SERVER['PHP_SELF']

Status: Open.

#239 In Cyber-III/Student-Management-System;

· duckpigdog opened on Mar 23, 2026

Reflected Cross-Site Scripting (XSS) in /admin/Add notice/batch-notice.php via $_SERVER['PHP_SELF']

Status: Open.

#238 In Cyber-III/Student-Management-System;

· duckpigdog opened on Mar 23, 2026

Reflected Cross-Site Scripting (XSS) in /admin/Add notice/notice.php via $_SERVER['PHP_SELF']

Status: Open.

#237 In Cyber-III/Student-Management-System;

· duckpigdog opened on Mar 23, 2026

Insecure Direct Object Reference (IDOR) in /viva/update.php allows unauthorized modification of team members' names

Status: Open.

#236 In Cyber-III/Student-Management-System;

· duckpigdog opened on Mar 23, 2026