Oretnom23 Simple Student Attendance System
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Oretnom23 Simple Student Attendance System.
By the Year
In 2026 there have been 0 vulnerabilities in Oretnom23 Simple Student Attendance System. Simple Student Attendance System did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 6 | 7.58 |
| 2023 | 8 | 9.21 |
It may take a day or so for new Simple Student Attendance System vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Oretnom23 Simple Student Attendance System Security Vulnerabilities
XSS via id in get_student - Simple Student Attendance System 1.0
CVE-2024-6212
6.1 - Medium
- June 21, 2024
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function get_student of the file student_form.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269276.
XSS
XSS in SourceCodester Simple Student Attendance System v1.0 via crafted GET URL
CVE-2024-25551
- March 03, 2024
Cross Site Scripting (XSS) vulnerability in sourcecodester Simple Student Attendance System v1.0 allows attackers to execute arbitrary code via crafted GET request to web application URL.
Student Attendance Sys v1.0 XSS in /php-attendance/attendance_report
CVE-2023-51802
6.1 - Medium
- February 29, 2024
Cross Site Scripting (XSS) vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the page or class_month parameter in the /php-attendance/attendance_report component.
XSS
SQLi in Simple Student Attendance System v1.0 via id in student_form & class_form
CVE-2023-51801
9.8 - Critical
- February 29, 2024
SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the student_form.php and the class_form.php pages.
Code Injection
SQL Injection in Simple Student Attendance System 1.0 (List of Classes Page)
CVE-2024-1923
9.8 - Critical
- February 27, 2024
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by this issue is the function delete_class/delete_student of the file /ajax-api.php of the component List of Classes Page. The manipulation of the argument id with the input 1337'+or+1=1;--+ leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-254858 is the identifier assigned to this vulnerability.
SQL Injection
SourceCodester Simple Student Attendance System 1.0 XSS via class_date
CVE-2024-1834
6.1 - Medium
- February 23, 2024
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&class_id=1. The manipulation of the argument class_date with the input 2024-02-23%22%3E%3Cscript%3Ealert(1)%3C/script%3E leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254625 was assigned to this vulnerability.
XSS
Simple Student Attendance System 1.0: Critical Path Traversal via 'page' Param
CVE-2023-7058
9.8 - Critical
- December 22, 2023
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument page leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-248749 was assigned to this vulnerability.
Path Traversal: '../filedir'
SQLi in SourceCodester Simple Student Attendance System 1.0 actions.class.php
CVE-2023-6771
9.8 - Critical
- December 13, 2023
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function save_attendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247907.
SQL Injection
SourceCodester Simple Student Attendance 1.0 SQLi in ajax-api.php
CVE-2023-6658
9.8 - Critical
- December 10, 2023
A vulnerability classified as critical was found in SourceCodester Simple Student Attendance System 1.0. This vulnerability affects unknown code of the file ajax-api.php?action=save_attendance. The manipulation of the argument class_id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-247366 is the identifier assigned to this vulnerability.
SQL Injection
CVE-2023-6657: SQLi in Simple Student Attendance 1.0 via student_form.php
CVE-2023-6657
9.8 - Critical
- December 10, 2023
A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affects an unknown part of the file /modals/student_form.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-247365 was assigned to this vulnerability.
SQL Injection
SQLi in modals/class_form.php of SSAS 1.0
CVE-2023-6619
9.8 - Critical
- December 08, 2023
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /modals/class_form.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-247256.
SQL Injection
LFI via page param in SourceCodester Simple Student Attendance System 1.0
CVE-2023-6618
8.8 - High
- December 08, 2023
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247255.
Externally Controlled Reference to a Resource in Another Sphere
Simple Student Attendance System 1.0 SQLi via class_id in attendance.php
CVE-2023-6617
9.8 - Critical
- December 08, 2023
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as critical. Affected is an unknown function of the file attendance.php. The manipulation of the argument class_id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-247254 is the identifier assigned to this vulnerability.
SQL Injection
SourceCodester Simple Student Attendance System 1.0 XSS via page param
CVE-2023-6616
6.1 - Medium
- December 08, 2023
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247253 was assigned to this vulnerability.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Oretnom23 Simple Student Attendance System or by Oretnom23? Click the Watch button to subscribe.
