الباحثون
رجوع
Krishna Yadav
#20450
من 60,459
15.2
إجمالي CVSS
الثغرات
·
2
متوسطة
1
حرجة
1
PT-2020-16251
2020-12-08
9.8
CVE-2020-25889
Php/Mysql
Online Bus Booking System Project Using Php/Mysql
The issue allows remote attackers to bypass authentication and execute arbitrary SQL commands via the login page by placing a SQL injection payload. This can lead to attackers gaining admin privileges.
PT-2020-16256
2020-12-08
5.4
CVE-2020-25955
Sourcecodester
Sourcecodester Student Management System
The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability can be exploited via the 'add subject' tab, allowing for stored XSS attacks.