CVE-2024-34936

A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter...

CVE-2024-34936

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection flaw in the /view/event1.php API endpoint. An attacker can exploit this vulnerability by submitting arbitrary SQL commands via the month parameter. This allows for the execution of unauthorized ...

CVE-2024-34936

A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter...

CVE-2024-34935

The Campcodes Complete Web-Based School Management System version 1.0 is susceptible to a SQL injection vulnerability within the /view/conversation_history_admin.php API endpoint. An attacker can exploit this by providing malicious input through the conversation_id parameter to execute arbitrary ...

CVE-2024-34935

A SQL injection vulnerability in /view/conversationhistoryadmin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversationid parameter...

CVE-2024-34934

A SQL injection vulnerability exists in the Campcodes Complete Web-Based School Management System 1.0 . The flaw is located in the /view/emarks_range_grade_update_form.php component, where an attacker can execute arbitrary SQL commands by manipulating the conversation_id parameter. This vulnerabi...

CVE-2024-34932

The Campcodes Complete Web-Based School Management System version 1.0 contains a SQL injection vulnerability in the /model/update_exam.php API endpoint. An attacker can exploit this by providing malicious input via the name parameter to execute arbitrary SQL commands. As a temporary workaround, i...

CVE-2024-34932

A SQL injection vulnerability in /model/updateexam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-34932

A SQL injection vulnerability in /model/updateexam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-34931

A SQL injection vulnerability in /model/updatesubject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-34931

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection flaw in the /model/update_subject.php file. An attacker can exploit this by sending malicious input via the name parameter to execute arbitrary SQL commands. This vulnerability could lead to una...

CVE-2024-34930

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection vulnerability. The root cause is the improper neutralization of special elements in an SQL command within the "/model/all_events1.php" API endpoint. An attacker can exploit this by providing mal...

CVE-2024-34929

A SQL injection vulnerability exists in the /view/find_friends.php API endpoint of Campcodes Complete Web-Based School Management System version 1.0 . The flaw allows an attacker to execute arbitrary SQL commands by exploiting the my_index parameter. This vulnerability can lead to unauthorized ac...

CVE-2024-34928

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection flaw in the /model/update_subject_routing.php API endpoint. An attacker can exploit this by providing malicious input via the grade parameter to execute arbitrary SQL commands. While no specific...

CVE-2024-34927

A SQL injection vulnerability exists in the /model/update_classroom.php component of Campcodes Complete Web-Based School Management System 1.0 . This flaw allows an attacker to execute arbitrary SQL commands by exploiting the name parameter . The vulnerability is classified under CWE-89 (Improper...

CVE-2024-5240 Campcodes Complete Web-Based School Management System unread_msg.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-5240 Campcodes Complete Web-Based School Management System unread_msg.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-5239 Campcodes Complete Web-Based School Management System timetable_update_form.php sql injection

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view/timetableupdateform.php. The manipulation of the argument grade leads to sql injection. The attack can be initiated...

CVE-2024-5238

CVE-2024-5238 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in an unknown part of /view/timetable_insert_form.php triggered by manipulating the grade parameter. It can be exploited remotely and has publicly disclosed exploit information (...

CVE-2024-5238 Campcodes Complete Web-Based School Management System timetable_insert_form.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/timetableinsertform.php. The manipulation of the argument grade leads to sql injection. It is possible to initiate the attack...