CVE-2024-4823 Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/officeadmin/' in the parameters esbankacc, esbankname, esbankpin, escheckno, estellernumber, dc1 and dc2. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially...

CVE-2024-4822 Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session...

CVE-2024-4822

The CVE-2024-4822 vulnerability affects School ERP Pro+Responsive 1.0, enabling cross-site scripting via the username and password parameters in /index.php. The root cause is a reflected XSS that can partially hijack a victim’s browser session. Multiple sources (CVE records and PT-2024-33031) cor...

CVE-2024-4822 Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session...

PT-2024-33051 · Unknown · School Erp Pro+Responsive

Name of the Vulnerable Software and Affected Versions: School ERP Pro+Responsive version 1.0 Description: The issue allows SQL injection through the "/SchoolERP/office admin/" index in parameters such as groups id, examname, classes id, es voucherid, es class, etc. This could enable a remote...

PT-2024-33031 · Unknown · School Erp Pro+Responsive

Name of the Vulnerable Software and Affected Versions: School ERP Pro+Responsive version 1.0 Description: The issue allows an attacker to partially take control of the victim's browser session through a cross-site scripting XSS attack. This is achieved by exploiting the username and password...

CVE-2024-4722 Campcodes Complete Web-Based School Management System index.php cross site scripting

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument category leads to cross site scripting. The attack can be initiated remotely. The explo...

CVE-2024-4722

The CVE-2024-4722 affects Campcodes Complete Web-Based School Management System 1.0, specifically the index.php file where manipulating the category argument triggers cross-site scripting. The vulnerability can be exploited remotely and public details exist about it. Multiple sources corroborate ...

CVE-2024-4722 Campcodes Complete Web-Based School Management System index.php cross site scripting

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument category leads to cross site scripting. The attack can be initiated remotely. The explo...

CVE-2024-4721 Campcodes Complete Web-Based School Management System add_student_subject.php cross site scripting

A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /model/addstudentsubject.php. The manipulation of the argument index leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-4721 Campcodes Complete Web-Based School Management System add_student_subject.php cross site scripting

A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /model/addstudentsubject.php. The manipulation of the argument index leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-4720 Campcodes Complete Web-Based School Management System approve_petty_cash.php cross site scripting

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /model/approvepettycash.php. The manipulation of the argument adminindex leads to cross site scripting. The...

CVE-2024-4719 Campcodes Complete Web-Based School Management System delete_record.php cross site scripting

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /model/deleterecord.php. The manipulation of the argument page leads to cross site scripting. The...

CVE-2024-4719 Campcodes Complete Web-Based School Management System delete_record.php cross site scripting

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /model/deleterecord.php. The manipulation of the argument page leads to cross site scripting. The...

CVE-2024-4719

CVE-2024-4719 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in the /model/delete_record.php page triggered by manipulating the page parameter, allowing remote exploitation. The exploit has been disclosed publicly (VDB-263797). ...

CVE-2024-4718

CVE-2024-4718 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerable component is an unknown function in /model/delete_student_grade_subject.php, where manipulation of the index parameter enables cross-site scripting. Exploitation can be performed remotely, and public d...

CVE-2024-4718 Campcodes Complete Web-Based School Management System delete_student_grade_subject.php cross site scripting

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /model/deletestudentgradesubject.php. The manipulation of the argument index leads to cross site scripting. It is possible to...

CVE-2024-4717

CVE-2024-4717 affects Campcodes Complete Web-Based School Management System 1.0. A cross-site scripting vulnerability arises from manipulating the name parameter in /model/update_classroom.php, exploitable remotely. The issue is triggered by improper handling of the argument name, enabling user-c...

CVE-2024-4717 Campcodes Complete Web-Based School Management System update_classroom.php cross site scripting

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /model/updateclassroom.php. The manipulation of the argument name leads to cross site scripting. The attack may be initiated...

CVE-2024-4717 Campcodes Complete Web-Based School Management System update_classroom.php cross site scripting

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /model/updateclassroom.php. The manipulation of the argument name leads to cross site scripting. The attack may be initiated...