Search results

Stored Cross‑Site Scripting (XSS) in Student Records – Multiple Output Points

Status: Open.

#5 In imvks786/student_management_system;

· duckpigdog opened on May 25, 2026

VIEW-Privileged User Can Delete Student Records – Server‑Side Authorization Missing in see.php

Status: Open.

#4 In imvks786/student_management_system;

· duckpigdog opened on May 25, 2026

Insufficient Authorization

Status: Open.

#3 In imvks786/student_management_system;

· duckpigdog opened on May 25, 2026

SQL Injection in Admin Login Leading to Authentication Bypass

Status: Open.

#2 In imvks786/student_management_system;

· duckpigdog opened on May 25, 2026

Multiple SQL Injection Vulnerabilities Leading to Authentication Bypass, Data Manipulation, and Privilege Escalation

Status: Open.

#1 In imvks786/student_management_system;

· duckpigdog opened on May 25, 2026