CVE-2024-4717 Campcodes Complete Web-Based School Management System update_classroom.php cross site scripting

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /model/updateclassroom.php. The manipulation of the argument name leads to cross site scripting. The attack may be initiated...

CVE-2024-4716 Campcodes Complete Web-Based School Management System update_exam.php cross site scripting

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /model/updateexam.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated...

CVE-2024-4715 Campcodes Complete Web-Based School Management System update_grade.php cross site scripting

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /model/updategrade.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-4039 Orders Tracking for WooCommerce <= 1.2.10 - Unauthenticated Arbitrary Shortcode Execution

The The Orders Tracking for WooCommerce plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.10. This is due to the plugin allowing users to execute an action that does not properly validate a value before running doshortcode...

CVE-2024-4688 Campcodes Complete Web-Based School Management System conversation_history_admin.php cross site scripting

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/conversationhistoryadmin.php. The manipulation of the argument conversationid leads to cross site scriptin...

CVE-2024-4688 Campcodes Complete Web-Based School Management System conversation_history_admin.php cross site scripting

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/conversationhistoryadmin.php. The manipulation of the argument conversationid leads to cross site scriptin...

CVE-2024-4685

The CVE-2024-4685 entry concerns Campcodes Complete Web-Based School Management System 1.0. A cross-site scripting vulnerability arises from manipulating the exam parameter in /view/exam_timetable.php. It can be exploited remotely, and public exploits are reported. Affected products/versions are ...

CVE-2024-4682

CVE-2024-4682 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in the unknown functionality of /view/exam_timetable_update_form.php, triggered by manipulating the exam parameter. It can be exploited remotely and is publicly disclo...

CVE-2024-4678 Campcodes Complete Web-Based School Management System find_friends.php cross site scripting

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /view/findfriends.php. The manipulation of the argument mytype leads to cross site scripting. The...

CVE-2024-4678

Campcodes Complete Web-Based School Management System 1.0 contains a cross-site scripting vulnerability in the /view/find_friends.php page. The my_type parameter can be manipulated to trigger XSS, with remote exploitation indicated and public disclosure of the exploit. Connected sources consisten...

CVE-2024-4677 Campcodes Complete Web-Based School Management System my_student_exam_marks1.php cross site scripting

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /view/mystudentexammarks1.php. The manipulation of the argument year leads to cross site scripting. It is possible to launch t...

CVE-2024-4677

CVE-2024-4677 affects Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/my_student_exam_marks1.php where manipulating the year parameter triggers cross-site scripting. The vulnerability can be exploited remotely, and the exploit has been ...

CVE-2024-4676

The vulnerability CVE-2024-4676 affects Campcodes Complete Web-Based School Management System 1.0. The issue is a cross-site scripting (XSS) flaw arising from manipulation of the count argument in the /view/range_grade_text.php endpoint. Attack vector is remote and public exploit appears to have ...

CVE-2024-4675 Campcodes Complete Web-Based School Management System show_events.php cross site scripting

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /view/showevents.php. The manipulation of the argument eventid leads to cross site scripting. The attack can be initiated...

CVE-2024-4674 Campcodes Complete Web-Based School Management System show_friend_request.php cross site scripting

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/showfriendrequest.php. The manipulation of the argument myindex leads to cross site scripting. It is possible to initiate th...

CVE-2024-4673 Campcodes Complete Web-Based School Management System show_student_grade_subject.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /view/showstudentgradesubject.php. The manipulation of the argument id leads to cross site scripting...

CVE-2024-4652

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/showteacher2.php. The manipulation of the argument month leads to cross site scripting. It is possible to launch the atta...

CVE-2024-4650

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the file /view/studentduepayment.php. The manipulation of the argument duemonth leads to cross site scripting. The attack can be initiated...

CVE-2024-4651

The CVE-2024-4651 entry concerns Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in the year parameter of /view/student_attendance_history1.php, arising from how the input is processed. This could allow remote attackers to execute arbitr...

CVE-2024-4651 Campcodes Complete Web-Based School Management System student_attendance_history1.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue affects some unknown processing of the file /view/studentattendancehistory1.php. The manipulation of the argument year leads to cross site scripting. The...