CNNVD-202511-3056 Information
CNNVD ID
CNNVD-202511-3056
Related CVE
- CNNVD Published: 2025-11-30
Description (Chinese)
School Management System PHP & MYSQL是Elias Yasin个人开发者的一个学校管理系统。 School Management System PHP & MYSQL存在代码注入漏洞，该漏洞源于文件/student-view.php中参数First Name的错误操作，可能导致跨站脚本攻击。
Description (English)
School Management Systems PHP & MYSQL is a school management system for Elias Yasin personal developers. School Management System PHP & MYSQL has a code-injecting loophole, which is the result of an error in the parameter First Name in file/student-view.php, which may result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
个人开发者
Published
2025-11-30
Last Modified
2026-02-24
References
https://github.com/Al1ce258/MY-CVE-REPORTS/blob/main/school-management-system.md https://vuldb.com/?id.333806 https://vuldb.com/?ctiid.333806 https://vuldb.com/?submit.691836 https://access.redhat.com/security/cve/cve-2025-13795
Share on: