CVE-2024-3529 Campcodes Complete Online Student Management System students_view.php cross site scripting

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been classified as problematic. This affects an unknown part of the file studentsview.php. The manipulation of the argument FirstRecord leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-3529

The CVE-2024-3529 entry concerns Campcodes Complete Online Student Management System 1.0. The vulnerability affects an unknown portion of the file students_view.php, where manipulation of the FirstRecord argument enables cross-site scripting. It is possible to initiate the attack remotely, and th...

CVE-2024-3528 Campcodes Complete Online Student Management System units_view.php cross site scripting

A vulnerability was found in Campcodes Complete Online Student Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file unitsview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be launche...

CVE-2024-3528 Campcodes Complete Online Student Management System units_view.php cross site scripting

A vulnerability was found in Campcodes Complete Online Student Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file unitsview.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be launche...

CVE-2024-3526

CVE-2024-3526 affects Campcodes Online Event Management System 1.0. An XSS flaw exists in the index.php file where the msg parameter is not properly filtered/escaped, allowing remote injection of arbitrary script code. Several connected sources describe the issue and confirm that the vulnerabilit...

CVE-2024-3524

A vulnerability, which was classified as problematic, has been found in Campcodes Online Event Management System 1.0. This issue affects some unknown processing of the file /views/process.php. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotel...

CVE-2024-3525

A vulnerability, which was classified as problematic, was found in Campcodes Online Event Management System 1.0. Affected is an unknown function of the file /views/index.php. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2024-3525

A vulnerability, which was classified as problematic, was found in Campcodes Online Event Management System 1.0. Affected is an unknown function of the file /views/index.php. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2024-3525 Campcodes Online Event Management System index.php cross site scripting

A vulnerability, which was classified as problematic, was found in Campcodes Online Event Management System 1.0. Affected is an unknown function of the file /views/index.php. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2024-3525

CVE-2024-3525 affects Campcodes Online Event Management System 1.0. An XSS vulnerability exists in an unknown function of /views/index.php through the msg parameter, exploitable remotely and with the vulnerability publicly disclosed. Affected impact is consistent with reflected/XSS behavior; expl...

CVE-2024-3524 Campcodes Online Event Management System process.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Campcodes Online Event Management System 1.0. This issue affects some unknown processing of the file /views/process.php. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotel...

CVE-2024-3524

CVE-2024-3524 affects Campcodes Online Event Management System 1.0. A cross-site scripting flaw arises from unknown processing in /views/process.php where manipulating the name argument enables XSS. The attack can be remote and the exploit has been publicly disclosed. Sources consistently referen...

CVE-2024-3522

A vulnerability classified as critical has been found in Campcodes Online Event Management System 1.0. This affects an unknown part of the file /api/process.php. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-3523

A vulnerability classified as critical was found in Campcodes Online Event Management System 1.0. This vulnerability affects unknown code of the file /views/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

CVE-2024-3521

A vulnerability was found in Byzoro Smart S80 Management Platform up to 20240317. It has been rated as critical. Affected by this issue is some unknown functionality of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be...

CVE-2024-3523

CVE-2024-3523 is a reported SQL injection in Campcodes Online Event Management System v1.0, triggered by manipulating the ID parameter in the /views/index.php file. The vulnerability is exploitable remotely, with the exploit publicly disclosed. Affects unknown code paths in the identified file; i...

CVE-2024-3523 Campcodes Online Event Management System index.php sql injection

A vulnerability classified as critical was found in Campcodes Online Event Management System 1.0. This vulnerability affects unknown code of the file /views/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

CVE-2024-3523 Campcodes Online Event Management System index.php sql injection

A vulnerability classified as critical was found in Campcodes Online Event Management System 1.0. This vulnerability affects unknown code of the file /views/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

CVE-2024-3522 Campcodes Online Event Management System process.php sql injection

A vulnerability classified as critical has been found in Campcodes Online Event Management System 1.0. This affects an unknown part of the file /api/process.php. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-3522

Campcodes Online Event Management System 1.0 is affected by a SQL injection in /api/process.php via the userId parameter. Root cause: improper handling of user-supplied input leads to injection. Impact is described as high for confidentiality, integrity, and availability, with remote exploitation...