Skip to content
OpenAdvisories

Vendor

QDOCS

4 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 5.1

    Stored XSS in Smart School

    Stored Cross Site Scripting (XSS) vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/online_admission', wich affects the parameters 'firstname', 'lastname', 'guardian_name' and others. This vulner…

  • Medium 6.3

    QDocs Smart School Management System Chat mynewuser sql injection

    A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users[] with th…

  • Medium 6.3

    QDocs Smart School HTTP POST Request sql injection

    A vulnerability was found in QDocs Smart School 6.4.1. It has been classified as critical. This affects an unknown part of the file /course/filterRecords/ of the component HTTP POST Request Handler. The manipulation of the argument searchdata[0][title]/search…