2344 matches found
CVE-2024-4527: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /view/studentpaymentdetails2.php. The manipulation of the argument index leads to cross site scripting. It is possible to laun...
CVE-2024-4526: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /view/studentpaymentdetails3.php. The manipulation of the argument month leads to cross site scripting. The attack may be...
CVE-2024-4524: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/studentpaymentinvoice.php. The manipulation of the argument desc leads to cross site scripting. It is possible to initiate t...
CVE-2024-4523: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /view/teacherattendancehistory1.php. The manipulation of the argument year leads to cross site...
CVE-2024-4519: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /view/teachersalarydetails3.php. The manipulation of the argument month leads to cross site scripting. The attack may be...
CVE-2024-4518: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view/teachersalaryinvoice.php. The manipulation of the argument desc leads to cross site scripting. The attack can be...
CVE-2024-4517: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /view/teachersalaryinvoice1.php. The manipulation of the argument date leads to cross site scripting. It is possible to initiate...
CVE-2024-4514: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/timetableinsertform.php. The manipulation of the argument grade leads to cross site scripting. It is possible to launch t...
CVE-2024-4515: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /view/timetablegradewise.php. The manipulation of the argument grade leads to cross site scripting. The...
CVE-2024-33411: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /model/getadminprofile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the myindex parameter...
CVE-2024-33408: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /model/getclassroom.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...
CVE-2024-33405: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in addfriends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friendindex parameter...
CVE-2024-33407: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in /model/deleterecord.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...
CVE-2024-33406: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in /model/deletestudentgradesubject.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter...
CVE-2024-33403: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /model/getevents.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the eventid parameter...
PT-2024-25237
Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the friend index parameter in the add friends.php file. This can lead to unauthorized access and...
PT-2024-25243
Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the id parameter in the "/model/delete range grade.php" API endpoint. This can lead to unauthorize...
Unauthenticated CrushFTP Zero-Day Enables Complete Server Compromise
Rapid7 vulnerability researcher Ryan Emmons contributed to this blog. On Friday, April 19, 2024, managed file transfer vendor CrushFTP released information to a private mailing list on a new zero-day vulnerability affecting versions below 10.7.1 and 11.1.0 as well as legacy 9.x versions across al...
PT-2024-24744
Name of the Vulnerable Software and Affected Versions rustls versions prior to 0.21.11 rustls versions prior to 0.22.4 rustls versions prior to 0.23.5 Description The rustls::ConnectionCommon::complete io function could fall into an infinite loop based on network input. When using a blocking rust...
