Casap Automated Enrollment System Project Casap Automated Enrollment System
11 CVEs affecting Casap Automated Enrollment System Project Casap Automated Enrollment System. Latest disclosed: 2021-11-08. Critical: 5, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-26223 | Critical | 9.8 | 2021-07-22 | SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id p… |
CVE-2021-26226 | Critical | 9.8 | 2021-07-22 | SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id p… |
CVE-2021-26229 | Critical | 9.8 | 2021-07-22 | SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id p… |
CVE-2021-26228 | Critical | 9.8 | 2021-07-22 | SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id p… |
CVE-2021-26201 | Critical | 9.8 | 2021-02-15 | The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel… |
CVE-2021-40261 | Medium | 6.1 | 2021-11-08 | Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester CASAP Automated Enrollment System 1.0 via the (1) user_username and (2) category pa… |
CVE-2021-27332 | Medium | 6.1 | 2021-07-22 | Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HT… |
CVE-2021-26230 | Medium | 6.1 | 2021-07-22 | Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HT… |
CVE-2021-26227 | Medium | 6.1 | 2021-07-22 | Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HT… |
CVE-2021-27129 | Medium | 5.4 | 2021-04-15 | CASAP Automated Enrollment System version 1.0 contains a cross-site scripting (XSS) vulnerability through the Students > Edit > ROUTE parameter. |
CVE-2021-3294 | Medium | 5.4 | 2021-02-09 | CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a m… |