CVE-2024-4911 Campcodes Complete Web-Based School Management System student_exam_mark_update_form.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/studentexammarkupdateform.php. The manipulation of the argument exam leads to sql injection. The attack may...

CVE-2024-4911

CVE-2024-4911 affects Campcodes Complete Web-Based School Management System v1.0. The vulnerability is in /view/student_exam_mark_update_form.php where manipulation of the exam parameter enables SQL injection, admitting remote exploitation. Multiple connected sources confirm the issue without det...

CVE-2024-4910

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/studentexammarkinsertform1.php. The manipulation of the argument grade leads to sql injection. The...

CVE-2024-4909

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /view/studentduepayment.php. The manipulation of the argument dueyear leads to sql injection. It is possible to launch the attack...

CVE-2024-4907

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view/showstudent2.php. The manipulation of the argument grade leads to sql injection. The attack can be initiated remotely...

CVE-2024-4909

CVE-2024-4909 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in the unknown function handling the parameter due_year of the file /view/student_due_payment.php. Exploitation can be performed remotely, and the vulnerability has been publicly...

CVE-2024-4909 Campcodes Complete Web-Based School Management System student_due_payment.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /view/studentduepayment.php. The manipulation of the argument dueyear leads to sql injection. It is possible to launch the attack...

CVE-2024-4908 Campcodes Complete Web-Based School Management System student_attendance_history1.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/studentattendancehistory1.php. The manipulation of the argument index leads to sql injection. The attack may be initiated...

CVE-2024-4908 Campcodes Complete Web-Based School Management System student_attendance_history1.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/studentattendancehistory1.php. The manipulation of the argument index leads to sql injection. The attack may be initiated...

CVE-2024-4908

Campcodes Complete Web-Based School Management System 1.0 contains a SQL injection vulnerability in the /view/student_attendance_history1.php script. The issue arises from manipulation of the index parameter, enabling an injection remotely. The vulnerability entry notes that the attack may be ini...

CVE-2024-4907 Campcodes Complete Web-Based School Management System show_student2.php sql injection

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view/showstudent2.php. The manipulation of the argument grade leads to sql injection. The attack can be initiated remotely...

CVE-2024-4907

The CVE-2024-4907 vulnerability affects Campcodes Complete Web-Based School Management System 1.0. It resides in the file /view/show_student2.php and stems from manipulation of the grade parameter, enabling SQL injection. This was described as exploitable remotely and publicly disclosed, with evi...

CVE-2024-4906 Campcodes Complete Web-Based School Management System show_student1.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/showstudent1.php. The manipulation of the argument grade leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-4906 Campcodes Complete Web-Based School Management System show_student1.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/showstudent1.php. The manipulation of the argument grade leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-4906

CVE-2024-4906 affects Campcodes Complete Web-Based School Management System 1.0. A SQL injection vulnerability exists in the /view/show_student1.php file via the grade parameter, enabling remote exploitation. Exploit has been disclosed publicly; no remediation details are provided in the connecte...

CVE-2024-20258

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insufficient...

CVE-2024-20256

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Web Appliance could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insufficient...

CVE-2024-20257

Cisco AsyncOS Web-based management interface in Cisco Secure Email Gateway is affected by an XSS vulnerability due to insufficient input validation. An authenticated remote attacker could entice a user to click a crafted link, leading to arbitrary script execution within the interface or exposure...

CVE-2024-20369

A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator NSO could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An...

CVE-2024-20369

A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator NSO could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An...