Skip to content
Noroxi

DayCloud records

5 published records for vendor daycloud.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2025-50585
    35Monitor

    StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl.

    HighCVSS 8.8No exploitEPSS 0%

    daycloud · studentmanageJul 18, 2025

  • CVE-2025-50586
    26Monitor

    StudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF).

    MediumCVSS 6.5No exploitEPSS 0%

    daycloud · studentmanageJul 18, 2025

  • CVE-2025-50582
    19Monitor

    StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Course module.

    MediumCVSS 4.8No exploitEPSS 0%

    daycloud · studentmanageJul 18, 2025

  • CVE-2025-50583
    19Monitor

    StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Student module.

    MediumCVSS 4.8No exploitEPSS 0%

    daycloud · studentmanageJul 18, 2025

  • CVE-2025-50584
    19Monitor

    StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module.

    MediumCVSS 4.8No exploitEPSS 0%

    daycloud · studentmanageJul 18, 2025