CVE-2024-34934

A SQL injection vulnerability in /view/emarksrangegradeupdateform.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversationid parameter...

CVE-2024-34934

The CVE-2024-34934 entry concerns Campcodes Complete Web-Based School Management System 1.0. A SQL injection flaw exists in /view/emarks_range_grade_update_form.php, exploitable via the conversation_id parameter, allowing an attacker to execute arbitrary SQL commands. Impact is described as high ...

CVE-2024-34933

A SQL injection vulnerability in /model/updategrade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admissionfee parameter...

CVE-2024-34933

A SQL injection vulnerability in /model/updategrade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admissionfee parameter...

CVE-2024-34933

Campcodes Complete Web-Based School Management System 1.0 contains a SQL injection vulnerability in the /model/update_grade.php endpoint, exploitable via the admission_fee parameter. The issue allows an attacker to execute arbitrary SQL commands. Multiple connected sources (Red Hat, NVD/CNVD-like...

CVE-2024-34932

A SQL injection vulnerability in /model/updateexam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-34932

The CVE-2024-34932 entry concerns Campcodes Complete Web-Based School Management System 1.0. A SQL injection vulnerability exists in the /model/update_exam.php endpoint, exploitable via the name parameter to execute arbitrary SQL commands. The issue is described across multiple connected records ...

CVE-2024-34931

A SQL injection vulnerability in /model/updatesubject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-34931

CVE-2024-34931 describes a SQL injection in Campcodes Complete Web-Based School Management System 1.0, exploitable via the parameter name in /model/update_subject.php. The root cause is unsanitized user input allowing arbitrary SQL commands, leading to high-impact outcomes across confidentiality,...

CVE-2024-34930

A SQL injection vulnerability in /model/allevents1.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the month parameter...

CVE-2024-34930

CVE-2024-34930 affects Campcodes Complete Web-Based School Management System 1.0; a SQL injection exists in /model/all_events1.php exploitable via the month parameter, enabling arbitrary SQL commands and impacting data integrity/availability. Root cause/technical details beyond the Initial descri...

CVE-2024-34929

A SQL injection vulnerability in /view/findfriends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the myindex parameter...

CVE-2024-34929

CVE-2024-34929 affects Campcodes Complete Web-Based School Management System version 1.0. The vulnerability is a SQL injection in the /view/find_friends.php endpoint, exploitable via the my_index parameter to execute arbitrary SQL commands. Root cause is insecure handling of user input in that AP...

CVE-2024-34928

A SQL injection vulnerability in /model/updatesubjectrouting.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter...

CVE-2024-34928

A SQL injection vulnerability in /model/updatesubjectrouting.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter...

CVE-2024-34928

CVE-2024-34928 affects Campcodes Complete Web-Based School Management System 1.0. A SQL injection flaw exists in /model/update_subject_routing.php via the grade parameter, enabling an attacker to execute arbitrary SQL commands. The vulnerability stems from improper input handling in the stated en...

CVE-2024-34927

A SQL injection vulnerability in /model/updateclassroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-34927

The CVE-2024-34927 entry concerns a SQL injection in the Campcodes Complete Web-Based School Management System 1.0, specifically in the /model/update_classroom.php endpoint via the name parameter. The vulnerability allows an attacker to execute arbitrary SQL commands, with a critical impact profi...

CVE-2024-5240

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-5240

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...