Dino Physics School Assistant

dino_physics_school_assistant

Vendor: Dino Physics School Assistant Project • 12 CVEs

CVEs (12)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-35359 1Dino Physics School Assistant Project 1Dino Physics School Assistant Nov 21, 2024 May 30, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_item. Manipulating the argument id can result in...Show more A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_item. Manipulating the argument id can result in SQL injection.Show less
CVE-2024-35353 1Dino Physics School Assistant Project 1Dino Physics School Assistant Apr 11, 2025 May 30, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Users.php?f=save. Manipulating the argument id can result in impro...Show more A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Users.php?f=save. Manipulating the argument id can result in improper authorization.Show less
CVE-2024-35352 1Dino Physics School Assistant Project 1Dino Physics School Assistant Apr 11, 2025 May 30, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/Users.php?f=save. Manipulating the parameter middlename results in c...Show more A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/Users.php?f=save. Manipulating the parameter middlename results in cross-site scripting.Show less
CVE-2024-35351 1Dino Physics School Assistant Project 1Dino Physics School Assistant Apr 11, 2025 May 30, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/SystemSettings.php?f=update_settings. Manipulating the parameter nam...Show more A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/SystemSettings.php?f=update_settings. Manipulating the parameter name results in cross-site scripting.Show less
CVE-2024-35350 1Dino Physics School Assistant Project 1Dino Physics School Assistant Apr 11, 2025 May 30, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/view_borrow. Manipulating the argument id can result in...Show more A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/view_borrow. Manipulating the argument id can result in SQL injection.Show less
CVE-2024-35349 1Dino Physics School Assistant Project 1Dino Physics School Assistant Nov 21, 2024 May 30, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/category/view_category.php. Manipulating the argument id can result...Show more A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/category/view_category.php. Manipulating the argument id can result in SQL injection.Show less
CVE-2024-35358 1Dino Physics School Assistant Project 1Dino Physics School Assistant Apr 11, 2025 May 30, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_category. Manipulating the argument id can resul...Show more A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_category. Manipulating the argument id can result in SQL injection.Show less
CVE-2024-35357 1Dino Physics School Assistant Project 1Dino Physics School Assistant Apr 11, 2025 May 30, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_item. Manipulating the argument id can result...Show more A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_item. Manipulating the argument id can result in SQL injection.Show less
CVE-2024-35356 1Dino Physics School Assistant Project 1Dino Physics School Assistant Apr 11, 2025 May 30, 2024 N/A· v4 6.3 MEDIUM· v3 N/A· v2 A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_item. Manipulating the argument id can result in...Show more A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_item. Manipulating the argument id can result in SQL injection.Show less
CVE-2024-35355 1Dino Physics School Assistant Project 1Dino Physics School Assistant Apr 11, 2025 May 30, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_category. Manipulating the argument id can res...Show more A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_category. Manipulating the argument id can result in SQL injection.Show less
CVE-2024-35354 1Dino Physics School Assistant Project 1Dino Physics School Assistant Apr 11, 2025 May 30, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_category. Manipulating the argument id can resul...Show more A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_category. Manipulating the argument id can result in SQL injection.Show less
CVE-2024-35345 1Dino Physics School Assistant Project 1Dino Physics School Assistant Apr 11, 2025 May 30, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts unidentified code within the file /classes/Users.php. Manipulating the argument id results in cross-site scripti...Show more A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts unidentified code within the file /classes/Users.php. Manipulating the argument id results in cross-site scripting.Show less