CVE-2025-0849

A vulnerability classified as critical has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /edit-staff/ of the component Staff Handler. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit h...

CVE-2025-0849 CampCodes School Management Software Staff edit-staff improper authorization

A vulnerability classified as critical has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /edit-staff/ of the component Staff Handler. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit h...

CVE-2025-0710

A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the...

CVE-2025-0710

CVE-2025-0710 affects CampCodes School Management Software 1.0. The vulnerability is in the Notice Board Page, specifically the file/endpoint /notice-list where the Notice parameter can be manipulated to trigger cross-site scripting. The issue is exploitable remotely, and public disclosure of the...

CVE-2025-0625

A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. This affects an unknown part of the component Attachment Handler. The manipulation leads to improper control of resource identifiers. It is possible to initiate the attack remotely. The...

CVE-2025-0625

CVE-2025-0625 affects CampCodes School Management Software 1.0, specifically the Attachment Handler component. The vulnerability arises from improper control of resource identifiers, enabling an attacker to manipulate identifiers remotely. Descriptions consistently indicate remote exploitability ...

CVE-2025-0581 CampCodes School Management Software Chat History send cross site scripting

A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. This affects an unknown part of the file /chat/group/send of the component Chat History. The manipulation of the argument message leads to cross site scripting. It is possible to initiate the...

CVE-2025-0581

CVE-2025-0581 affects CampCodes School Management Software v1.0, specifically the /chat/group/send endpoint in the Chat History component. The root cause is manipulation of the message parameter enabling cross-site scripting (XSS), with remote exploitation and a publicly disclosed exploit. Severa...

Campcodes School Management Software 代码注入漏洞

Campcodes School Management Software is a school management software from Campcodes, Inc. A code injection vulnerability exists in version 1.0 of CampCodes School Management Software, which stems from a cross-site scripting attack in the parameter message in the file /chat/group/send in the...

CVE-2025-0560

A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /photo-gallery of the component Photo Gallery Page. The manipulation of the argument Description leads to cross site scripting. It is possible t...

CVE-2024-33803

A SQL injection vulnerability in /model/getexam.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33799

A SQL injection vulnerability in /model/getteacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33799

A SQL injection vulnerability in /model/getteacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33802

A SQL injection vulnerability in /model/getstudentsubject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter...