4 matches found
CVE-2024-33808
A SQL injection vulnerability in /model/gettimetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...
9.8CVSS6.1AI score0.0051EPSS
SaveExploits1References1
Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68965)
Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /gettimetable.php?id=The page lacks validation for external SQL statements, which cou...
6.5CVSS2.5AI score0.00909EPSS
SaveExploits1Affected Software1
20