PT-2024-25235

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/get events.php file allows an attacker to execute arbitrary SQL commands via the event id parameter. This enables the attacker to...

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which originates from a cross-site scripting vulnerability in...

campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the campcodes Complete Web-Based School Management System, which originates from an SQL injection vulnerability in the index paramet...

PT-2024-31524 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A vulnerability was found in the system, classified as problematic. It affects an unknown function of the file /view/student payment details2.php. The manipulation...

CVE-2024-33407: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /model/deleterecord.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33408: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/getclassroom.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-4522: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/teachersalarydetails.php. The manipulation of the argument index leads to cross site scripting. The attack...

CVE-2024-33411

The Campcodes Complete Web-Based School Management System version 1.0 is susceptible to a SQL injection vulnerability in the /model/get_admin_profile.php file. An attacker can execute arbitrary SQL commands by manipulating the my_index parameter, which may lead to unauthorized data access or modi...

CVE-2024-33406: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /model/deletestudentgradesubject.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter...

CVE-2024-33406

SQL injection vulnerability in /model/deletestudentgradesubject.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter...

PT-2024-31453 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting an unknown part of the file /view/teacher salary invoice1.php. The manipulation of th...

CVE-2024-4513: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue affects some unknown processing of the file /view/timetableupdateform.php. The manipulation of the argument grade leads to cross site scripting. The attack...

campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the campcodes Complete Web-Based School Management System, which results from an SQL injection vulnerability in the eventid paramete...

CVE-2024-4517: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /view/teachersalaryinvoice1.php. The manipulation of the argument date leads to cross site scripting. It is possible to initiate...

CVE-2024-4515: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /view/timetablegradewise.php. The manipulation of the argument grade leads to cross site scripting. The...

CVE-2024-4525: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /view/studentpaymentdetails4.php. The manipulation of the argument index leads to cross site scripting. The attack can be...

CVE-2024-33409

A critical SQL injection vulnerability exists in the index.php file of campcodes Complete Web-Based School Management System 1.0 . This flaw allows an attacker to execute arbitrary SQL commands by interacting with the name parameter. The vulnerability results from improper neutralization of speci...

PT-2024-25238

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the index parameter in the /model/delete student grade subject.php API endpoint. This can...

CVE-2024-33405

The campcodes Complete Web-Based School Management System 1.0 is susceptible to an SQL injection vulnerability in the add_friends.php file. An attacker can exploit this flaw by providing malicious input through the friend_index parameter to execute arbitrary SQL commands. No specific remediation ...

CVE-2024-4526: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /view/studentpaymentdetails3.php. The manipulation of the argument month leads to cross site scripting. The attack may be...