Lucene search
+L

5601 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•5 views

CVE-2024-4518: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view/teachersalaryinvoice.php. The manipulation of the argument desc leads to cross site scripting. The attack can be...

6.1CVSS3.9AI score0.0059EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/06 12:00 a.m.•5 views

PT-2024-25240

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/get classroom.php file allows an attacker to execute arbitrary SQL commands via the id parameter. This could potentially lead to...

9.8CVSS0.00713EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•13 views

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a cross-site scripting vulnerability in the...

6.1CVSS4.5AI score0.0059EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/05/06 12:00 a.m.•14 views

CVE-2024-33411

A SQL injection vulnerability in /model/getadminprofile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the myindex parameter...

8.5AI score0.00713EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/05/06 12:00 a.m.•9 views

PT-2024-25244

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/get admin profile.php file allows an attacker to execute arbitrary SQL commands via the my index parameter. This enables the...

9.8CVSS0.00713EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•9 views

CVE-2024-33411: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/getadminprofile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the myindex parameter...

9.8CVSS6.3AI score0.00713EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•20 views

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a cross-site scripting vulnerability in the...

6.1CVSS4.5AI score0.00578EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•24 views

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a cross-site scripting vulnerability in the...

6.1CVSS4.5AI score0.0059EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•5 views

CVE-2024-33404: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/addstudentfirstpayment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter...

8.3CVSS6.3AI score0.00559EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/06 12:00 a.m.•45 views

CVE-2024-33405

SQL injection vulnerability in addfriends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friendindex parameter...

8.4AI score0.00522EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/05/06 12:00 a.m.•19 views

PT-2024-31484 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A vulnerability has been found in the Campcodes Complete Web-Based School Management System. The issue affects an unknown function of the file /view/teacher salary...

6.1CVSS4.3AI score0.00608EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•10 views

CVE-2024-33409: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...

9.8CVSS6.4AI score0.00713EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•10 views

CVE-2024-4519: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /view/teachersalarydetails3.php. The manipulation of the argument month leads to cross site scripting. The attack may be...

6.1CVSS3.9AI score0.00578EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/06 12:00 a.m.•5 views

PT-2024-25237

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the friend index parameter in the add friends.php file. This can lead to unauthorized access and...

8.6CVSS6.2AI score0.00522EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•8 views

CVE-2024-4527: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /view/studentpaymentdetails2.php. The manipulation of the argument index leads to cross site scripting. It is possible to laun...

6.1CVSS4AI score0.0056EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•9 views

CVE-2024-33405: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in addfriends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friendindex parameter...

8.6CVSS6.4AI score0.00522EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•4 views

CVE-2024-4521: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/teachersalarydetails2.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the...

6.1CVSS4AI score0.00608EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/06 12:00 a.m.•6 views

PT-2024-25236

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/add student first payment.php file allows an attacker to execute arbitrary SQL commands via the index parameter. This could...

8.3CVSS0.00559EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2024/05/06 12:00 a.m.•35 views

CVE-2024-33407

SQL injection vulnerability in /model/deleterecord.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

8.4AI score0.00264EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•21 views

campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the campcodes Complete Web-Based School Management System due to an SQL injection vulnerability in the name parameter of the index.p...

9.8CVSS7.8AI score0.00713EPSS
SaveExploits1References2
Rows per page
Query Builder