Filtered by vendor Dino Physics School Assistant Project Subscriptions
Filtered by product Dino Physics School Assistant Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-35353 1 Dino Physics School Assistant Project 1 Dino Physics School Assistant 2025-03-19 9.8 Critical
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Users.php?f=save. Manipulating the argument id can result in improper authorization.
CVE-2024-35359 1 Dino Physics School Assistant Project 1 Dino Physics School Assistant 2025-02-13 5.4 Medium
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_item. Manipulating the argument id can result in SQL injection.
CVE-2024-35358 1 Dino Physics School Assistant Project 1 Dino Physics School Assistant 2025-02-13 6.5 Medium
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_category. Manipulating the argument id can result in SQL injection.
CVE-2024-35357 1 Dino Physics School Assistant Project 1 Dino Physics School Assistant 2025-02-13 5.3 Medium
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_item. Manipulating the argument id can result in SQL injection.
CVE-2024-35356 1 Dino Physics School Assistant Project 1 Dino Physics School Assistant 2025-02-13 6.3 Medium
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_item. Manipulating the argument id can result in SQL injection.
CVE-2024-35349 1 Dino Physics School Assistant Project 1 Dino Physics School Assistant 2025-02-13 9.8 Critical
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/category/view_category.php. Manipulating the argument id can result in SQL injection.