Student Information System vulnerabilities

A vulnerability was detected in code-projects Student Information System 1.0 in the file /profile.php. Manipulation of the firstname/lastname arguments leads to cross-site scripting (XSS). The exploit is publicly available and can be used remotely.

A cross-site scripting vulnerability was identified in code-projects Student Information System 2.0 in the /editprofile.php file. The attack can be launched remotely and a public exploit is available.

A vulnerability was determined in code-projects Student Information System 2.0 in /register.php. This manipulation causes cross-site scripting (XSS). The attack can be initiated remotely, and the exploit has been publicly disclosed.