CVE-2024-34933: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/updategrade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admissionfee parameter...

CVE-2024-4715: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /model/updategrade.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack...