Lucene search
K

137 matches found

CNNVD
CNNVD
added 2024/05/15 12:0 a.m.1 views

Campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System that stems from an SQL injection vulnerability in the dueyear parameter of...

6.5CVSS7AI score0.00407EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.3 views

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which originates from a cross-site scripting vulnerability in...

6.1CVSS4.5AI score0.00635EPSS
Exploits1References6
Cvelist
Cvelist
added 2024/05/10 3:0 p.m.14 views

CVE-2024-4720 Campcodes Complete Web-Based School Management System approve_petty_cash.php cross site scripting

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /model/approvepettycash.php. The manipulation of the argument adminindex leads to cross site scripting. The...

5.3CVSS4.1AI score0.00657EPSS
Exploits1References4
CVE
CVE
added 2024/05/10 3:0 p.m.30 views

CVE-2024-4720

CVE-2024-4720 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerable component is the script at /model/approve_petty_cash.php, where manipulating the admin_index parameter enables cross-site scripting (XSS). Attacks may be launched remotely, and public exploits are repo...

6.1CVSS6.2AI score0.00657EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2024/05/10 2:31 p.m.39 views

CVE-2024-4718

CVE-2024-4718 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerable component is an unknown function in /model/delete_student_grade_subject.php, where manipulation of the index parameter enables cross-site scripting. Exploitation can be performed remotely, and public d...

6.1CVSS6.2AI score0.00635EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2024/05/10 10:0 a.m.32 views

CVE-2024-4713

CVE-2024-4713 impacts Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in the /view/all_teacher.php page, triggered by manipulating the page parameter. Exploitation can be carried out remotely, and public disclosure of the exploit is note...

6.1CVSS6.2AI score0.00635EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2024/05/08 2:15 p.m.2 views

CVE-2024-4649

A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/studentexammarkinsertform1.php. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the...

6.1CVSS3.9AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/05/08 2:0 p.m.16 views

CVE-2024-4652 Campcodes Complete Web-Based School Management System show_teacher2.php cross site scripting

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/showteacher2.php. The manipulation of the argument month leads to cross site scripting. It is possible to launch the atta...

4CVSS6.2AI score0.00441EPSS
Exploits1References4
CVE
CVE
added 2024/05/08 2:0 p.m.60 views

CVE-2024-4652

Campcodes Complete Web-Based School Management System 1.0 contains a cross-site scripting flaw in /view/show_teacher2.php via the month parameter. The vulnerability is exploitable remotely and has been publicly disclosed. Affected component is an unknown function; root cause is input manipulation...

6.1CVSS6.2AI score0.00441EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2024/05/08 12:0 a.m.1 views

Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which originates from a cross-site scripting vulnerability in...

6.1CVSS4.5AI score0.00464EPSS
Exploits1References5
OSV
OSV
added 2024/05/06 6:15 p.m.2 views

CVE-2024-33411

A SQL injection vulnerability in /model/getadminprofile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the myindex parameter...

9.8CVSS6.1AI score0.00713EPSS
Exploits1References2
OSV
OSV
added 2024/05/06 5:15 a.m.4 views

CVE-2024-4522

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/teachersalarydetails.php. The manipulation of the argument index leads to cross site scripting. The attack...

6.1CVSS3.8AI score0.00608EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/05/06 12:0 a.m.1 views

campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the campcodes Complete Web-Based School Management System due to an SQL injection vulnerability in the friendindex parameter of the...

8.6CVSS7.8AI score0.00522EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/05/06 12:0 a.m.2 views

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which originates from a cross-site scripting vulnerability in...

6.1CVSS4.5AI score0.00608EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/05/06 12:0 a.m.8 views

CVE-2024-33403

A SQL injection vulnerability in /model/getevents.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the eventid parameter...

8.5AI score0.00713EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/05/06 12:0 a.m.5 views

PT-2024-31507 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A vulnerability has been found in the system, classified as problematic. It affects unknown code of the file /view/student payment details4.php. The manipulation o...

6.1CVSS4.4AI score0.0056EPSS
Exploits1References9
CVE
CVE
added 2024/05/06 12:0 a.m.60 views

CVE-2024-33411

CVE-2024-33411 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection in the /model/get_admin_profile.php endpoint, exploitable via the my_index parameter to execute arbitrary SQL commands. Impact is described as high confidentiality, integrity, an...

9.8CVSS8.5AI score0.00713EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2024/05/06 12:0 a.m.14 views

CVE-2024-33409

SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...

8.4AI score0.00713EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.3 views

Web-Based Student Clearance System SQL Injection Vulnerability

Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A SQL injection vulnerability exists in Web-Based Student Clearance System version 1.0, which stems from an incorrect manipulation of the parameter Fullname that can lead to sql...

7.2CVSS8.4AI score0.00714EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2023/11/22 12:0 a.m.1 views

The vulnerability of the PUB Manager web-based system for managing technological processes in SIMATIC PCS neo lies in the lack of protective measures for the SQL query structure. This allows attackers to execute arbitrary SQL queries against the database.

The vulnerability of the PUB Manager web-based system for managing technological processes in SIMATIC PCS neo relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...

6.3CVSS7.9AI score0.00432EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder