CVE-2026-105808: falha de média gravidade em SourceCodester Simple Student Information System
SourceCodester Simple Student Information System searchresults.php clean cross site scripting
Publicada em
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 5.1epss 0.3%
probabilidade de exploração
0.3%top 83% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
SourceCodester · Simple Student Information SystemPoCs públicas encontradas — 1
cve_referencegithub.com/wsx138/cve/issues/6não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — SourceCodester Simple Student Information System
No mesmo produto, das mais perigosas para as menos.
CVE-2022-2722MEDIUMSourceCodester Simple Student Information System manage_course.php sql injectionEPSS 0.9%CVE-2022-2705MEDIUMSourceCodester Simple Student Information System manage_department.php sql injectionEPSS 0.8%CVE-2023-2425LOWSourceCodester Simple Student Information System Add New Course cross site scriptingEPSS 0.6%CVE-2026-19710MEDIUMSourceCodester Simple Student Information System view_department.php sql injectionEPSS 0.4%CVE-2026-105809MEDIUMSourceCodester Simple Student Information System Profile Field register.php cross site scriptingEPSS 0.3%CVE-2026-105807MEDIUMSourceCodester Simple Student Information System searchquery.php sql injectionEPSS 0.3%