Lucene search
+L

4300 matches found

CNVD
CNVD
added 2025/11/20 12:00 a.m.18 views

School Fees Payment Management System /ajax.php?action=save_course File SQL Injection Vulnerability

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from a lack of validation of an externally entered SQL statement in the parameter ID of the file...

8.8CVSS6AI score0.00308EPSS
SaveExploits1References1
Wired Threat Level
Wired Threat Level
added 2025/11/19 10:00 a.m.11 views

Vaping Is ‘Everywhere’ in Schools—Sparking a Bathroom Surveillance Boom

Schools in the US are installing vape-detection tech in bathrooms to thwart student nicotine and cannabis use. A new investigation reveals the impact of using spying to solve a problem...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/11/18 10:09 a.m.14 views

CVE-2025-13274

A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deletefees. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The...

8.8CVSS6.3AI score0.00308EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 10:09 a.m.15 views

CVE-2025-13273

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletepayment. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

8.8CVSS6.3AI score0.00308EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 9:05 a.m.12 views

CVE-2025-13271

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 9:05 a.m.10 views

CVE-2025-13272

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /managecourse.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 8:06 a.m.14 views

CVE-2025-13269

A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=savepayment. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

8.8CVSS7.1AI score0.00308EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 8:06 a.m.11 views

CVE-2025-13270

A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=savecourse. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could...

8.8CVSS6.9AI score0.00308EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 12:11 a.m.18 views

CVE-2024-46336

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via /clientuser/feedback.php...

6.1CVSS6.3AI score0.00225EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/17 6:30 p.m.11 views

EUVD-2024-55086

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via the formuser and formpassword parameters in /adminLogin.php...

6.1CVSS5.7AI score0.00225EPSS
SaveExploits1References3
NVD
NVD
added 2025/11/17 5:15 p.m.17 views

CVE-2024-46334

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via the formuser and formpassword parameters in /adminLogin.php...

6.1CVSS0.00225EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/17 5:15 p.m.13 views

CVE-2024-46336

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via /clientuser/feedback.php...

6.1CVSS0.00225EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/17 5:15 p.m.13 views

CVE-2024-46334

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via the formuser and formpassword parameters in /adminLogin.php...

6.1CVSS5.8AI score0.00225EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/17 5:15 p.m.12 views

CVE-2024-46336

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via /clientuser/feedback.php...

6.1CVSS5.8AI score0.00225EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/17 10:15 a.m.13 views

CVE-2025-13274

A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deletefees. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The...

8.8CVSS5.7AI score0.00308EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/17 10:15 a.m.14 views

CVE-2025-13274

A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deletefees. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The...

8.8CVSS0.00308EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/17 10:15 a.m.12 views

CVE-2025-13273

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletepayment. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

8.8CVSS5.7AI score0.00308EPSS
SaveExploits1References5
NVD
NVD
added 2025/11/17 10:15 a.m.10 views

CVE-2025-13273

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletepayment. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

8.8CVSS0.00308EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2025/11/17 10:02 a.m.6 views

CVE-2025-13274

A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deletefees. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The...

8.8CVSS6.3AI score0.00308EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2025/11/17 10:02 a.m.37 views

CVE-2025-13274

CVE-2025-13274 affects Campcodes School Fees Payment Management System 1.0. The vulnerability is a SQL injection in the /ajax.php?action=delete_fees handler, caused by manipulation of the ID parameter. It can be exploited remotely and an exploit has been made public. The available connected docum...

8.8CVSS6.3AI score0.00308EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder