CVE-2024-33406: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /model/deletestudentgradesubject.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter...

CVE-2024-4525: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /view/studentpaymentdetails4.php. The manipulation of the argument index leads to cross site scripting. The attack can be...

PT-2024-25237

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the friend index parameter in the add friends.php file. This can lead to unauthorized access and...

CVE-2024-33405

SQL injection vulnerability in addfriends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friendindex parameter...

CVE-2024-33404

A SQL injection vulnerability in /model/addstudentfirstpayment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter...

PT-2024-25244

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/get admin profile.php file allows an attacker to execute arbitrary SQL commands via the my index parameter. This enables the...

CVE-2024-4521: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/teachersalarydetails2.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the...

CVE-2024-4515: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /view/timetablegradewise.php. The manipulation of the argument grade leads to cross site scripting. The...

CVE-2024-4513: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue affects some unknown processing of the file /view/timetableupdateform.php. The manipulation of the argument grade leads to cross site scripting. The attack...

CVE-2024-4517: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /view/teachersalaryinvoice1.php. The manipulation of the argument date leads to cross site scripting. It is possible to initiate...

PT-2024-25238

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the index parameter in the /model/delete student grade subject.php API endpoint. This can...

CVE-2024-33404: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/addstudentfirstpayment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter...

PT-2024-25243

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the id parameter in the "/model/delete range grade.php" API endpoint. This can lead to unauthorize...

PT-2024-25240

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/get classroom.php file allows an attacker to execute arbitrary SQL commands via the id parameter. This could potentially lead to...

CVE-2024-33409: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-33407

The campcodes Complete Web-Based School Management System version 1.0 is vulnerable to an SQL injection flaw in the /model/delete_record.php API endpoint. The root cause is the improper neutralization of special elements in the id parameter, which allows an attacker to execute arbitrary SQL comma...

CVE-2023-32145

D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-32145

D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-32145

Consolidated view of CVE-2023-32145: D-Link DAP-1360 devices are affected by a hardcoded credentials authentication bypass in the web UI login handling. This enables network-adjacent attackers to bypass authentication without user interaction. The vulnerability scores high (CVSSv3.1: AV=A, AC:L, ...

CVE-2023-32145 D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability

D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...