1308 matches found
CVE-2006-1418
CVE-2006-1418 is an XSS vulnerability in Caloris Planitia E-School Management System 1.0 and earlier, exploitable via the msg parameter of default.asp. The affected component is the web application’s default.asp page; root cause is improper handling/encoding of user-supplied input leading to scri...
CVE-2006-1418
Cross-site scripting XSS vulnerability in default.asp in Caloris Planitia E-School Management System 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
E-School Management System XSS vuln. and Web Quiz pro XSS vuln.
E-School Management System XSS vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:www.calorisplanitia.com/e-school-management-system.aspx affected versions: 1.0 and prior orginal advisory: http://pridels.blogspot.com/2006/03/e-school-management-system-xss-vuln.html Vuln. description:...
CVE-2024-33402
A SQL injection vulnerability in /model/approvepettycash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...
CVE-2024-33804
A SQL injection vulnerability in /model/getsubject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...
CVE-2024-33807
A SQL injection vulnerability in /model/getteachertimetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter...
CVE-2024-33800
A SQL injection vulnerability in /model/getstudent1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter...