Zerowdd

Studentmanager

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-3587

Exploit
  • EPSS 0.05%
  • Veröffentlicht 14.04.2025 20:15:19
  • Zuletzt bearbeitet 05.06.2025 19:28:11

A vulnerability classified as critical was found in ZeroWdd/code-projects studentmanager 1.0. This vulnerability affects unknown code of the file /getTeacherList. The manipulation leads to improper authorization. The attack can be initiated remotely....

5.1

CVE-2024-13143

  • EPSS 0.08%
  • Veröffentlicht 06.01.2025 00:15:05
  • Zuletzt bearbeitet 06.01.2025 00:15:05

A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function submitAddPermission of the file src/main/java/com/zero/system/controller/PermissionController. java. The manipulation of the ar...

4.8

CVE-2024-13142

Exploit
  • EPSS 0.09%
  • Veröffentlicht 05.01.2025 23:15:06
  • Zuletzt bearbeitet 10.01.2025 17:32:54

A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects the function submitAddRole of the file src/main/java/com/zero/system/controller/RoleController. java. The manipulation of the arg...

6.5

CVE-2024-13134

  • EPSS 0.09%
  • Veröffentlicht 05.01.2025 08:15:05
  • Zuletzt bearbeitet 05.01.2025 08:15:05

A vulnerability, which was classified as critical, was found in ZeroWdd studentmanager 1.0. Affected is the function addTeacher/editTeacher of the file src/main/Java/com/wdd/studentmanager/controller/TeacherController. java. The manipulation of the a...

6.5

CVE-2024-13133

  • EPSS 0.08%
  • Veröffentlicht 05.01.2025 05:15:07
  • Zuletzt bearbeitet 05.01.2025 05:15:07

A vulnerability, which was classified as critical, has been found in ZeroWdd studentmanager 1.0. This issue affects the function addStudent/editStudent of the file src/main/Java/com/wdd/studentmanager/controller/StudentController. java. The manipulat...

5.4

CVE-2023-39094

Exploit
  • EPSS 0.19%
  • Veröffentlicht 21.08.2023 17:15:48
  • Zuletzt bearbeitet 21.11.2024 08:14:43

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function.