Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2741▼ 485 respecto a la semana anterior

Críticas / altas1305▼ 185 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior

282 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2020-8504	Modificada	Media (6.5)	1.1%	💥 Exploit	Arox School Management Software Php/mysql	31/1/2020	17/6/2026	School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user.
CVE-2017-12759	Modificada	Crítica (9.8)	3.6%	—	Ynetinteractive SOA School Management	9/5/2019	17/6/2026	Ynet Interactive - http://demo.ynetinteractive.com/soa/ SOA School Management 3.0 is affected by: SQL Injection. The impact is: Code execution (remote).
CVE-2018-7477	Modificada	Crítica (9.8)	2.7%	💥 Exploit	School Management Script Project School Management Script	28/2/2018	17/6/2026	SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4 via the Username and Password fields to parents/Parent_module/parent_login.php.
CVE-2017-16561	Modificada	Crítica (9.8)	1.4%	—	Ingenious School Management System Project Ingenious School Management System	7/11/2017	17/6/2026	/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' parameter of a GET request.
CVE-2017-15957	Modificada	Alta (8.8)	3.9%	💥 Exploit	Ingenious School Management System Project Ingenious School Management System	29/10/2017	17/6/2026	my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.
CVE-2017-14843	Modificada	Alta (8.8)	2.7%	💥 Exploit	Dasinfomedia School Management System	28/9/2017	17/6/2026	Mojoomla School Management System for WordPress allows SQL Injection via the id parameter.
CVE-2006-1418	Modificada	Baja (2.6)	2.0%	💥 Exploit	Caloris Planitia Technologies E-school Management System	28/3/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in default.asp in Caloris Planitia E-School Management System 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.