CVE-2024-34930

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection vulnerability. The root cause is the improper neutralization of special elements in an SQL command within the "/model/all_events1.php" API endpoint. An attacker can exploit this by providing mal...

CVE-2024-34929

A SQL injection vulnerability in /view/findfriends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the myindex parameter...

CVE-2024-34929

A SQL injection vulnerability in /view/findfriends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the myindex parameter...

CVE-2024-34929

A SQL injection vulnerability exists in the /view/find_friends.php API endpoint of Campcodes Complete Web-Based School Management System version 1.0 . The flaw allows an attacker to execute arbitrary SQL commands by exploiting the my_index parameter. This vulnerability can lead to unauthorized ac...

CVE-2024-34928

A SQL injection vulnerability in /model/updatesubjectrouting.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter...

CVE-2024-34928

A SQL injection vulnerability in /model/updatesubjectrouting.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter...

CVE-2024-34928

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection flaw in the /model/update_subject_routing.php API endpoint. An attacker can exploit this by providing malicious input via the grade parameter to execute arbitrary SQL commands. While no specific...

CVE-2024-34927

A SQL injection vulnerability in /model/updateclassroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-34927

A SQL injection vulnerability in /model/updateclassroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-34927

A SQL injection vulnerability exists in the /model/update_classroom.php component of Campcodes Complete Web-Based School Management System 1.0 . This flaw allows an attacker to execute arbitrary SQL commands by exploiting the name parameter . The vulnerability is classified under CWE-89 (Improper...

CVE-2024-5240

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-5240

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-5240 Campcodes Complete Web-Based School Management System unread_msg.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-5240 Campcodes Complete Web-Based School Management System unread_msg.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-5240

The CVE-2024-5240 entry pertains to Campcodes Complete Web-Based School Management System v1.0, with a SQL injection in the /view/unread_msg.php file caused by manipulating the my_index argument. Multiple connected sources confirm remote exploitation and public disclosure of the exploit. Concrete...

CVE-2024-5239

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view/timetableupdateform.php. The manipulation of the argument grade leads to sql injection. The attack can be initiated...

CVE-2024-5238

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/timetableinsertform.php. The manipulation of the argument grade leads to sql injection. It is possible to initiate the attack...

CVE-2024-5238

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/timetableinsertform.php. The manipulation of the argument grade leads to sql injection. It is possible to initiate the attack...

CVE-2024-5237

A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /view/timetablegradewise.php. The manipulation of the argument grade leads to sql injection. The attack...

CVE-2024-5237

A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /view/timetablegradewise.php. The manipulation of the argument grade leads to sql injection. The attack...