CVE-2024-34929

A SQL injection vulnerability in /view/findfriends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the myindex parameter...

CVE-2024-34930

A SQL injection vulnerability in /model/allevents1.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the month parameter...

CVE-2024-34928

A SQL injection vulnerability in /model/updatesubjectrouting.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter...

CVE-2024-34929

A SQL injection vulnerability in /view/findfriends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the myindex parameter...

CVE-2024-34930

A SQL injection vulnerability in /model/allevents1.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the month parameter...

CVE-2024-34935

A SQL injection vulnerability in /view/conversationhistoryadmin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversationid parameter...

CVE-2024-34935

A SQL injection vulnerability in /view/conversationhistoryadmin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversationid parameter...

CVE-2024-34934

A SQL injection vulnerability in /view/emarksrangegradeupdateform.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversationid parameter...

CVE-2024-34934

The CVE-2024-34934 entry concerns Campcodes Complete Web-Based School Management System 1.0. A SQL injection flaw exists in /view/emarks_range_grade_update_form.php, exploitable via the conversation_id parameter, allowing an attacker to execute arbitrary SQL commands. Impact is described as high ...

CVE-2024-34934

A SQL injection vulnerability in /view/emarksrangegradeupdateform.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversationid parameter...

CVE-2024-34933

A SQL injection vulnerability in /model/updategrade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admissionfee parameter...

CVE-2024-34933

Campcodes Complete Web-Based School Management System 1.0 contains a SQL injection vulnerability in the /model/update_grade.php endpoint, exploitable via the admission_fee parameter. The issue allows an attacker to execute arbitrary SQL commands. Multiple connected sources (Red Hat, NVD/CNVD-like...

CVE-2024-34933

A SQL injection vulnerability in /model/updategrade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admissionfee parameter...

CVE-2024-34932

A SQL injection vulnerability in /model/updateexam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-34932

The CVE-2024-34932 entry concerns Campcodes Complete Web-Based School Management System 1.0. A SQL injection vulnerability exists in the /model/update_exam.php endpoint, exploitable via the name parameter to execute arbitrary SQL commands. The issue is described across multiple connected records ...

CVE-2024-34931

CVE-2024-34931 describes a SQL injection in Campcodes Complete Web-Based School Management System 1.0, exploitable via the parameter name in /model/update_subject.php. The root cause is unsanitized user input allowing arbitrary SQL commands, leading to high-impact outcomes across confidentiality,...

CVE-2024-34931

A SQL injection vulnerability in /model/updatesubject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-34930

A SQL injection vulnerability in /model/allevents1.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the month parameter...

CVE-2024-34930

CVE-2024-34930 affects Campcodes Complete Web-Based School Management System 1.0; a SQL injection exists in /model/all_events1.php exploitable via the month parameter, enabling arbitrary SQL commands and impacting data integrity/availability. Root cause/technical details beyond the Initial descri...

CVE-2024-34929

A SQL injection vulnerability in /view/findfriends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the myindex parameter...