CVE-2024-41242

A Reflected Cross Site Scripting XSS vulnerability was found in /smsa/studentlogin.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...

CVE-2024-41249

An Incorrect Access Control vulnerability was found in /smsa/viewsubject.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view SUBJECT details...

CVE-2024-41240

A Reflected Cross Site Scripting XSS vulnerability was found in " /smsa/teacherlogin.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via the "error" parameter...

CVE-2024-41244

An Incorrect Access Control vulnerability was found in /smsa/viewclass.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view CLASS details...

CVE-2024-41239

A Stored Cross Site Scripting XSS vulnerability was found in "/smsa/addclasssubmit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "classname" parameter field...

CVE-2024-41236: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /smsa/adminlogin.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page...

CVE-2024-41238: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /smsa/studentlogin.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter...

CVE-2024-41239

A Stored Cross Site Scripting XSS vulnerability was found in "/smsa/addclasssubmit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "classname" parameter field...

CVE-2024-41237: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /smsa/teacherlogin.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter...

CVE-2024-41242: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS vulnerability was found in /smsa/studentlogin.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...

CVE-2024-41250: Improper Access Control

An Incorrect Access Control vulnerability was found in /smsa/viewstudents.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view STUDENT details...

CVE-2024-41245: Improper Access Control

An Incorrect Access Control vulnerability was found in /smsa/viewteachers.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view TEACHER details...

CVE-2024-41243: Improper Access Control

An Incorrect Access Control vulnerability was found in /smsa/viewmarks.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view MARKS details...

CVE-2024-41252: Improper Access Control

An Incorrect Access Control vulnerability was found in /smsa/adminstudentregisterapproval.php and /smsa/adminstudentregisterapprovalsubmit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve student registration...

CVE-2024-41249: Improper Access Control

An Incorrect Access Control vulnerability was found in /smsa/viewsubject.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view SUBJECT details...

CVE-2024-41248: Improper Access Control

An Incorrect Access Control vulnerability was found in /smsa/addsubject.php and /smsa/addsubjectsubmit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new subject entry...

CVE-2024-41247: Improper Access Control

An Incorrect Access Control vulnerability was found in /smsa/addclass.php and /smsa/addclasssubmit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new class entry...

PT-2024-29317

Name of the Vulnerable Software and Affected Versions Kashipara Responsive School Management System version 1.0 Responsive School Management System version 3.2.0 Description A Stored Cross Site Scripting XSS issue was found in the "/smsa/add class submit.php" endpoint, allowing remote attackers t...

PT-2024-29315

Name of the Vulnerable Software and Affected Versions Kashipara Responsive School Management System version 1.0 Description A SQL injection issue allows an attacker to execute arbitrary SQL commands via the username parameter in the "/smsa/teacher login.php" API endpoint. Recommendations For...

CVE-2024-41241: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS vulnerability was found in " /smsa/adminlogin.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...