6 matches found
CVE-2024-33988
CVE-2024-33988 affects School Attendance Monitoring System and School Event Management System (version 1.0). The vulnerability is a Cross-Site Scripting (XSS) in the /report/attendance_print.php endpoint, exploitable via crafted values in Attendance, attenddate, and YearLevel parameters to cause ...
CVE-2024-33988 Cross-Site Scripting (XSS) vulnerability in Janobe products
Cross-Site Scripting XSS vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and...
CVE-2024-33987 Cross-Site Scripting (XSS) vulnerability in Janobe products
Cross-Site Scripting XSS vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate', 'YearLevel...
CVE-2024-33987
The CVE-2024-33987 entry describes a Cross-Site Scripting (XSS) vulnerability in Janobe’s School Attendance Monitoring System and School Event Management System (version 1.0). The issue allows an attacker to craft a URL targeting parameters such as Attendance, attenddate, YearLevel, eventdate, ev...
CVE-2024-33984 Cross-Site Scripting (XSS) vulnerability in Janobe products
Cross-Site Scripting XSS vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and...
CVE-2024-33983 Cross-Site Scripting (XSS) vulnerability in Janobe products
Cross-Site Scripting XSS vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and...