Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 7:58 a.m.•19 views

CVE-2024-33411

A SQL injection vulnerability in /model/getadminprofile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the myindex parameter...

9.8CVSS9.9AI score0.00713EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/05/23 5:15 p.m.•17 views

CVE-2024-34929

A SQL injection vulnerability in /view/findfriends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the myindex parameter...

9.8CVSS6.1AI score0.0051EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/23 5:15 p.m.•35 views

CVE-2024-34929

A SQL injection vulnerability in /view/findfriends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the myindex parameter...

9.8CVSS8.1AI score0.0051EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/23 12:00 a.m.•16 views

Campcodes Complete Web-Based School Management System SQL注入漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A SQL injection vulnerability exists in the Complete Web-Based School Management System version 1.0, which stems from an incorrect operation of the parameter myindex that can result ...

6.5CVSS7.3AI score0.00407EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/23 12:00 a.m.•7 views

CVE-2024-34929: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /view/findfriends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the myindex parameter...

9.8CVSS6.3AI score0.0051EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/23 12:00 a.m.•5 views

CVE-2024-5240: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...

6.5CVSS5.5AI score0.00407EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•7 views

CVE-2024-4674: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/showfriendrequest.php. The manipulation of the argument myindex leads to cross site scripting. It is possible to initiate th...

6.1CVSS4AI score0.00635EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•15 views

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which originates from a cross-site scripting vulnerability in...

6.1CVSS4.5AI score0.00635EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•10 views

CVE-2024-4687: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/createevents.php. The manipulation of the argument myindex leads to cross site scripting. It is possible to launch the attack...

6.1CVSS4AI score0.00516EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•9 views

CVE-2024-33411: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/getadminprofile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the myindex parameter...

9.8CVSS6.3AI score0.00713EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/15 12:00 a.m.•8 views

CVE-2022-32381: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getadminprofile.php?myindex=...

7.2CVSS7.2AI score0.00956EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/15 12:00 a.m.•7 views

CVE-2022-32378: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacherprofile.php?myindex=...

7.2CVSS7.2AI score0.00956EPSS
SaveExploits1References2
Rows per page
Query Builder