PT-2024-26250

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue allows an attacker to execute arbitrary SQL commands via the name parameter in the "/model/update classroom.php" API endpoint. Recommendations...

PT-2024-26251

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue allows an attacker to execute arbitrary SQL commands via the grade parameter in the "/model/update subject routing.php" API endpoint...

PT-2024-35178

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A critical issue has been found in the system, affecting the file /view/teacher salary details3.php. The manipulation of the index argument leads to SQL injection. T...

CVE-2024-34930: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/allevents1.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the month parameter...

PT-2024-35217

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A critical issue was found in the system, affecting the file /view/timetable insert form.php. The manipulation of the grade argument leads to SQL injection. It is...

CVE-2024-5238: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/timetableinsertform.php. The manipulation of the argument grade leads to sql injection. It is possible to initiate the attack...

Campcodes Complete Web-Based School Management System security vulnerabilities

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the month...

Campcodes Complete Web-Based School Management System SQL Injection Vulnerability

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. An SQL injection vulnerability exists in the Complete Web-Based School Management System version 1.0, which stems from an incorrect operation of the parameter index that can lead to...

CVE-2024-34929: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /view/findfriends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the myindex parameter...

CVE-2024-34935: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /view/conversationhistoryadmin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversationid parameter...

Campcodes Complete Web-Based School Management System SQL Injection Vulnerability

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. An SQL injection vulnerability exists in the Complete Web-Based School Management System version 1.0, which stems from an incorrect operation of the parameter index that can lead to...

Campcodes Complete Web-Based School Management System security vulnerabilities

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in the Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the...

Campcodes Complete Web-Based School Management System security vulnerabilities

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the name...

Campcodes Complete Web-Based School Management System SQL Injection Vulnerability

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A SQL injection vulnerability exists in the Complete Web-Based School Management System version 1.0, which stems from an incorrect operation of the parameter date that can lead to sq...

Campcodes Complete Web-Based School Management System security vulnerabilities

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the...

Campcodes Complete Web-Based School Management System security vulnerabilities

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the name...

CVE-2024-34927: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/updateclassroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

Campcodes Complete Web-Based School Management System security vulnerabilities

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in the Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the...

CVE-2024-34928: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/updatesubjectrouting.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter...

CVE-2024-34934: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /view/emarksrangegradeupdateform.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversationid parameter...