campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the campcodes Complete Web-Based School Management System, which results from an SQL injection vulnerability in the eventid paramete...

PT-2024-25238

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the index parameter in the /model/delete student grade subject.php API endpoint. This can...

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a cross-site scripting vulnerability in the...

PT-2024-25239

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the id parameter in the /model/delete record.php API endpoint. This can potentially lead to...

campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the campcodes Complete Web-Based School Management System due to an SQL injection vulnerability in the friendindex parameter of the...

PT-2024-25236

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/add student first payment.php file allows an attacker to execute arbitrary SQL commands via the index parameter. This could...

PT-2024-25241

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the name parameter in the index.php file. This can lead to unauthorized access and manipulation of...

PT-2024-25244

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/get admin profile.php file allows an attacker to execute arbitrary SQL commands via the my index parameter. This enables the...

campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the campcodes Complete Web-Based School Management System, which originates from an SQL injection vulnerability in the index paramet...

CVE-2024-33405

SQL injection vulnerability in addfriends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friendindex parameter...

CVE-2024-33410: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /model/deleterangegrade.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

PT-2024-25240

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/get classroom.php file allows an attacker to execute arbitrary SQL commands via the id parameter. This could potentially lead to...

PT-2024-25235

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/get events.php file allows an attacker to execute arbitrary SQL commands via the event id parameter. This enables the attacker to...

CVE-2024-33409: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-33404: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/addstudentfirstpayment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter...

CVE-2024-4525: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /view/studentpaymentdetails4.php. The manipulation of the argument index leads to cross site scripting. The attack can be...

CVE-2024-4522: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/teachersalarydetails.php. The manipulation of the argument index leads to cross site scripting. The attack...

CVE-2024-4521: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/teachersalarydetails2.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the...

CVE-2024-4516: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /view/timetable.php. The manipulation of the argument grade leads to cross site scripting. The attack may be...

CVE-2024-4513: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue affects some unknown processing of the file /view/timetableupdateform.php. The manipulation of the argument grade leads to cross site scripting. The attack...