Campcodes School Management Software 代码注入漏洞

Campcodes School Management Software is a school management software from Campcodes, Inc. A code injection vulnerability exists in version 1.0 of Campcodes School Management Software, which stems from the parameter Description in the file /photo-gallery that leads to cross-site scripting...

Campcodes School Management Software 代码注入漏洞

Campcodes School Management Software is a school management software from Campcodes, Inc. A code injection vulnerability exists in Campcodes School Management Software version 1.0, which originates from a cross-site scripting vulnerability in the ID Card Title parameter of the /create-id-card fil...

PT-2025-3953 · Unknown · Campcodes School Management

Name of the Vulnerable Software and Affected Versions: CampCodes School Management Software version 1.0 Description: A problematic vulnerability was found in the Photo Gallery Page component of the software, specifically in an unknown function of the file /photo-gallery. The manipulation of the...

WordPress Easy School Registration plugin <= 3.9.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin Easy School Registration versions = 3.9.8...

The School Shootings Were Fake. The Terror Was Real

The inside story of the teenager whose “swatting” calls sent armed police racing into hundreds of schools nationwide—and the private detective who tracked him down...

CVE-2024-12470

The School Management System – SakolaWP plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.8. This is due to the registration function not properly limiting what roles a user can register as. This makes it possible for unauthenticated attackers to...

CVE-2024-12470

CVE-2024-12470 affects the WordPress plugin School Management System – SakolaWP (SakolaWP-lite) up to version 1.0.8. Root cause: the registration function does not correctly restrict allowable user roles, enabling an unauthenticated attacker to register as an administrator. Impact: administrator ...

CVE-2025-0211

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploi...

CVE-2025-0211

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploi...

CVE-2025-0211 Campcodes School Faculty Scheduling System index.php file inclusion

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploi...

CVE-2025-0211

CVE-2025-0211 affects Campcodes School Faculty Scheduling System v1.0. The vulnerability is in /admin/index.php, where manipulating the page parameter leads to file inclusion. Described as a remote‑exploitable issue with publicly disclosed exploit. Remediation guidance is not in the Initial Descr...

CVE-2025-0211 Campcodes School Faculty Scheduling System index.php file inclusion

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploi...

CVE-2025-0210 Campcodes School Faculty Scheduling System ajax.php sql injection

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be...

CVE-2025-0210

CVE-2025-0210 affects Campcodes School Faculty Scheduling System v1.0. The vulnerability is an SQL injection in the parameter username of the file /admin/ajax.php?action=login, enabling remote exploitation. Multiple sources confirm the issue and public exploit availability. The CVSS metrics in th...

CVE-2025-0210 Campcodes School Faculty Scheduling System ajax.php sql injection

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be...

Campcodes School Faculty Scheduling System 注入漏洞

Campcodes School Faculty Scheduling System is a school faculty scheduling system from Campcodes. An injection vulnerability exists in Campcodes School Faculty Scheduling System version 1.0, which stems from the parameter username in the file /admin/ajax.php?action=login that can cause SQL injecti...

Campcodes School Faculty Scheduling System 安全漏洞

Campcodes School Faculty Scheduling System is a school faculty scheduling system from Campcodes, Inc. A security vulnerability exists in Campcodes School Faculty Scheduling System version 1.0, which stems from the parameter page in the file /admin/index.php that causes the file to include...

CVE-2024-54790

A SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System v1.0, which allows remote attackers to execute arbitrary code via the visittime parameter...

CVE-2024-54790

CVE-2024-54790 affects PHPGurukul Pre-School Enrollment System v1.0. The vulnerability is a SQL Injection in /index.php via the visittime parameter, enabling remote attackers to execute arbitrary code. The CVSS vector indicates network access with high impact to confidentiality, integrity, and av...

CVE-2024-54810

CVE-2024-54810 affects PHPGurukul Pre-School Enrollment System Project v1.0. The vulnerability is a SQL Injection in /preschool/admin/password-recovery.php that allows remote attackers to execute arbitrary code via the mobileno parameter. Base metrics indicate CRITICAL impact (CVSS 3.1: AV:N/AC:L...