CVE-2024-5237 Campcodes Complete Web-Based School Management System timetable_grade_wise.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /view/timetablegradewise.php. The manipulation of the argument grade leads to sql injection. The attack...

CVE-2024-5235

A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/teachersalaryinvoice.php. The manipulation of the argument teacherid leads to sql injection. It is possible to launch the attack...

CVE-2024-5234

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /view/teachersalaryhistory1.php. The manipulation of the argument index leads to sql injection. The attack may be initiated...

CVE-2024-5236 Campcodes Complete Web-Based School Management System teacher_salary_invoice1.php sql injection

A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/teachersalaryinvoice1.php. The manipulation of the argument date leads to sql injection. The attack can be...

CVE-2024-5235

CVE-2024-5235 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability exists in an unknown function of the file /view/teacher_salary_invoice.php, where manipulating the argument teacher_id leads to a SQL injection. It is exploitable remotely and the exploit has been d...

CVE-2024-5234 Campcodes Complete Web-Based School Management System teacher_salary_history1.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /view/teachersalaryhistory1.php. The manipulation of the argument index leads to sql injection. The attack may be initiated...

CVE-2024-5233 Campcodes Complete Web-Based School Management System teacher_salary_details3.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /view/teachersalarydetails3.php. The manipulation of the argument index leads to sql injection. The attack can be initiated...

CVE-2024-5233

CVE-2024-5233 affects Campcodes Complete Web-Based School Management System 1.0. The issue is an SQL injection caused by manipulation of the index argument in the file /view/teacher_salary_details3.php. The vulnerability can be triggered remotely and the exploit has been disclosed publicly. The c...

CVE-2024-5232 Campcodes Complete Web-Based School Management System teacher_salary_details2.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critical. This affects an unknown part of the file /view/teachersalarydetails2.php. The manipulation of the argument index leads to sql injection. It is possible to initiate the attac...

CVE-2024-5232 Campcodes Complete Web-Based School Management System teacher_salary_details2.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critical. This affects an unknown part of the file /view/teachersalarydetails2.php. The manipulation of the argument index leads to sql injection. It is possible to initiate the attac...

CVE-2024-5231 Campcodes Complete Web-Based School Management System teacher_salary_details.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view/teachersalarydetails.php. The manipulation of the argument index leads to sql injection. The attack may be...

CVE-2024-34932: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/updateexam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-34936: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter...

CVE-2024-34935: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /view/conversationhistoryadmin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversationid parameter...

CVE-2024-34933: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/updategrade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admissionfee parameter...

CVE-2024-34934: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /view/emarksrangegradeupdateform.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversationid parameter...

CVE-2024-5240: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-34929: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /view/findfriends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the myindex parameter...

PT-2024-26258 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue exists, allowing an attacker to execute arbitrary SQL commands. This is achieved through the "conversation id" parameter in the...

CVE-2024-34927: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /model/updateclassroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter...