CVE-2024-41250

An Incorrect Access Control vulnerability was found in /smsa/viewstudents.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view STUDENT details...

CVE-2024-41241

A Reflected Cross Site Scripting XSS vulnerability was found in " /smsa/adminlogin.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...

CVE-2024-41249

An Incorrect Access Control vulnerability was found in /smsa/viewsubject.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view SUBJECT details...

CVE-2024-41239

A Stored Cross Site Scripting XSS vulnerability was found in "/smsa/addclasssubmit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "classname" parameter field...

CVE-2024-41252

An Incorrect Access Control vulnerability was found in /smsa/adminstudentregisterapproval.php and /smsa/adminstudentregisterapprovalsubmit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve student registration...

Kashipara Responsive School Management System 安全漏洞

Kashipara Responsive School Management System is a school management system from Kashipara. A security vulnerability exists in Kashipara Responsive School Management System version v3.2.0, which originates from a reflected cross-site scripting vulnerability contained in the /smsa/adminlogin.php...

CVE-2024-41243

An Incorrect Access Control vulnerability was found in /smsa/viewmarks.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view MARKS details...

CVE-2024-41243

An Incorrect Access Control vulnerability was found in /smsa/viewmarks.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view MARKS details...

CVE-2024-41251

An Incorrect Access Control vulnerability was found in /smsa/adminteacherregisterapproval.php and /smsa/adminteacherregisterapprovalsubmit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve Teacher registration...

CVE-2024-41247

An Incorrect Access Control vulnerability was found in /smsa/addclass.php and /smsa/addclasssubmit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new class entry...

CVE-2024-41237

CVE-2024-41237 concerns Kashipara Responsive School Management System v1.0, with a SQL injection in /smsa/teacher_login.php exploitable via the username parameter. The vulnerability allows arbitrary SQL execution, evidencing high impact on confidentiality, integrity, and availability (per CVSS 3....

CVE-2024-41248

Kashipara Responsive School Management System v3.2.0 contains an Incorrect Access Control issue in /smsa/add_subject.php and /smsa/add_subject_submit.php that allows remote unauthenticated users to add a new subject entry. The root cause is improper access control for these API endpoints, enablin...

CVE-2024-41252

Kashipara Responsive School Management System v3.2.0 contains an Incorrect Access Control flaw affecting /smsa/admin_student_register_approval.php and /smsa/admin_student_register_approval_submit.php. Remote, unauthenticated attackers can view and approve student registrations due to insufficient...

CVE-2024-41249

Kashipara Responsive School Management System v3.2.0 suffers an Incorrect Access Control flaw in /smsa/view_subject.php that allows remote unauthenticated attackers to view SUBJECT details. This is documented across multiple sources (CVE-2024-41249; Red Hat and NVD entries) with no explicit patch...

CVE-2024-41245

CVE-2024-41245 is an Incorrect Access Control vulnerability affecting Kashipara Responsive School Management System v3.2.0. The flaw exists in the /smsa/view_teachers.php endpoint, enabling remote unauthenticated attackers to view TEACHER details. Descriptions across sources confirm the same issu...

CVE-2024-6374

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as problematic. This issue affects some unknown processing of the file /subject.php of the component Subject Page. The manipulation of the argument Subject Title/Sybillus Details leads to cross site...

CVE-2024-6374 lahirudanushka School Management System Subject Page subject.php cross site scripting

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as problematic. This issue affects some unknown processing of the file /subject.php of the component Subject Page. The manipulation of the argument Subject Title/Sybillus Details leads to cross site...

CVE-2024-6374

CVE-2024-6374 affects lahirudanushka School Management System 1.0.0/1.0.1. The vulnerability is a stored XSS in the Subject Page’s /subject.php, triggered by manipulating the Subject Title/Sybillus Details parameters. The issue is exploitable remotely and the exploit has been disclosed publicly. ...

School-Management-System Cross-Site Scripting Vulnerability

School-Management-System is a school management system by the individual developer Lahiru Danushka. A cross-site scripting vulnerability exists in School-Management-System, which stems from a cross-site scripting vulnerability in the Sybillus parameter of the /subject.php file...

CVE-2024-6277

A vulnerability, which was classified as critical, was found in lahirudanushka School Management System 1.0.0/1.0.1. Affected is an unknown function of the file student.php of the component Student Page. The manipulation of the argument update leads to sql injection. It is possible to launch the...