CVE-2024-4523: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /view/teacherattendancehistory1.php. The manipulation of the argument year leads to cross site...

CVE-2024-33404: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/addstudentfirstpayment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter...

CVE-2024-33411

A SQL injection vulnerability in /model/getadminprofile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the myindex parameter...

PT-2024-25244

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/get admin profile.php file allows an attacker to execute arbitrary SQL commands via the my index parameter. This enables the...

CVE-2024-33411: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/getadminprofile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the myindex parameter...

CVE-2024-33405

SQL injection vulnerability in addfriends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friendindex parameter...

CVE-2024-33407: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /model/deleterecord.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-4526: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /view/studentpaymentdetails3.php. The manipulation of the argument month leads to cross site scripting. The attack may be...

CVE-2024-33408

A SQL injection vulnerability in /model/getclassroom.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33409: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-4519: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /view/teachersalarydetails3.php. The manipulation of the argument month leads to cross site scripting. The attack may be...

PT-2024-25237

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the friend index parameter in the add friends.php file. This can lead to unauthorized access and...

CVE-2024-33410

SQL injection vulnerability in /model/deleterangegrade.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a cross-site scripting vulnerability in the...

CVE-2024-33405: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in addfriends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friendindex parameter...

CVE-2024-33403

A SQL injection vulnerability in /model/getevents.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the eventid parameter...

CVE-2024-4522: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/teachersalarydetails.php. The manipulation of the argument index leads to cross site scripting. The attack...

CVE-2024-33407

The campcodes Complete Web-Based School Management System version 1.0 is vulnerable to an SQL injection flaw in the /model/delete_record.php API endpoint. The root cause is the improper neutralization of special elements in the id parameter, which allows an attacker to execute arbitrary SQL comma...

CVE-2024-4516: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /view/timetable.php. The manipulation of the argument grade leads to cross site scripting. The attack may be...

CVE-2024-33404

A SQL injection vulnerability in /model/addstudentfirstpayment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter...