CVE-2024-34931

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection flaw in the /model/update_subject.php file. An attacker can exploit this by sending malicious input via the name parameter to execute arbitrary SQL commands. This vulnerability could lead to una...

CVE-2024-34932

The Campcodes Complete Web-Based School Management System version 1.0 contains a SQL injection vulnerability in the /model/update_exam.php API endpoint. An attacker can exploit this by providing malicious input via the name parameter to execute arbitrary SQL commands. As a temporary workaround, i...

CVE-2024-34934

A SQL injection vulnerability exists in the Campcodes Complete Web-Based School Management System 1.0 . The flaw is located in the /view/emarks_range_grade_update_form.php component, where an attacker can execute arbitrary SQL commands by manipulating the conversation_id parameter. This vulnerabi...

CVE-2024-34936

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection flaw in the /view/event1.php API endpoint. An attacker can exploit this vulnerability by submitting arbitrary SQL commands via the month parameter. This allows for the execution of unauthorized ...

CVE-2024-34929

A SQL injection vulnerability exists in the /view/find_friends.php API endpoint of Campcodes Complete Web-Based School Management System version 1.0 . The flaw allows an attacker to execute arbitrary SQL commands by exploiting the my_index parameter. This vulnerability can lead to unauthorized ac...

CVE-2024-34933

The Campcodes Complete Web-Based School Management System version 1.0 contains a SQL injection vulnerability in the /model/update_grade.php API endpoint. An attacker can exploit this by providing malicious input via the admission_fee parameter to execute arbitrary SQL commands. To minimize risk u...

CVE-2024-34930

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection vulnerability. The root cause is the improper neutralization of special elements in an SQL command within the "/model/all_events1.php" API endpoint. An attacker can exploit this by providing mal...

CVE-2024-34935

The Campcodes Complete Web-Based School Management System version 1.0 is susceptible to a SQL injection vulnerability within the /view/conversation_history_admin.php API endpoint. An attacker can exploit this by providing malicious input through the conversation_id parameter to execute arbitrary ...

CVE-2024-4521

CVE-2024-4521 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in the unknown function of the file /view/teacher_salary_details2.php caused by manipulation of the index parameter. It is remotely exploitable and the exploit has bee...

CVE-2024-4523

CVE-2024-4523 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability arises from cross-site scripting in the year parameter of the file /view/teacher_attendance_history1.php, enabling remote exploitation. Multiple connected sources confirm the issue and its public di...

CVE-2024-34927

A SQL injection vulnerability exists in the /model/update_classroom.php component of Campcodes Complete Web-Based School Management System 1.0 . This flaw allows an attacker to execute arbitrary SQL commands by exploiting the name parameter . The vulnerability is classified under CWE-89 (Improper...

CVE-2024-4526

CVE-2024-4526 affects Campcodes Complete Web-Based School Management System 1.0. The issue is a cross-site scripting vulnerability in the month parameter of /view/student_payment_details3.php. Attack could be initiated remotely and the exploit has been publicly disclosed. Multiple connected sourc...

CVE-2024-5238

CVE-2024-5238 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in an unknown part of /view/timetable_insert_form.php triggered by manipulating the grade parameter. It can be exploited remotely and has publicly disclosed exploit information (...

CVE-2024-5103

CVE-2024-5103 affects Campcodes Complete Web-Based School Management System v1.0. The vulnerability is an SQL injection in the file /view/student_first_payment.php caused by manipulation of the grade parameter. It is exploitable remotely, with the exploit publicly disclosed. Details across source...

CVE-2024-4648

Campcodes Complete Web-Based School Management System v1.0 contains a cross-site scripting (XSS) vulnerability in the /view/student_exam_mark_update_form.php file, triggered by manipulating the std_index parameter. Publicly disclosed exploits indicate remote attack potential. Connected sources co...

CVE-2024-5240

The CVE-2024-5240 entry pertains to Campcodes Complete Web-Based School Management System v1.0, with a SQL injection in the /view/unread_msg.php file caused by manipulating the my_index argument. Multiple connected sources confirm remote exploitation and public disclosure of the exploit. Concrete...

CVE-2024-33803

The campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection vulnerability. An attacker can execute arbitrary SQL commands by exploiting the id parameter in the /model/get_exam.php API endpoint. As a mitigation, it is recommended to restrict access to thi...

CVE-2024-4647

CVE-2024-4647 affects Campcodes Complete Web-Based School Management System 1.0. A cross-site scripting vulnerability exists in an unknown functionality of the file /view/student_first_payment.php, triggered by manipulating the index parameter. Exploitation is possible remotely, and public disclo...

CVE-2024-5234

CVE-2024-5234 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection caused by manipulation of the argument index in the file /view/teacher_salary_history1.php, enabling remote attack. Exploit has been disclosed publicly. Documentation confirms the...

CVE-2024-34928

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection flaw in the /model/update_subject_routing.php API endpoint. An attacker can exploit this by providing malicious input via the grade parameter to execute arbitrary SQL commands. While no specific...

CVE-2024-5239

The CVE-2024-5239 issue affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability resides in the /view/timetable_update_form.php code path where manipulation of the grade parameter enables SQL injection. It is exploitable remotely, and public disclosure of the exploit i...

CVE-2024-5237

CVE-2024-5237 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection in /view/timetable_grade_wise.php driven by unsafely manipulated grade parameter. Root cause: improper handling of user input enables attacker-controlled SQL execution remotely; c...

CVE-2024-4650

CVE-2024-4650 affects Campcodes Complete Web-Based School Management System 1.0. A cross-site scripting flaw exists in the due_month parameter of /view/student_due_payment.php, allowing remote exploitation. The issue stems from manipulation of due_month in that script, enabling XSS. Public exploi...

CVE-2024-4514

CVE-2024-4514 affects Campcodes Complete Web-Based School Management System 1.0 . The vulnerability is in the file /view/timetable_insert_form.php, where manipulating the grade argument can trigger a cross-site scripting (XSS) vulnerability. The issue is exploitable remotely, and exploits have be...

CVE-2024-4517

CVE-2024-4517 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability exists in an unknown portion of the file /view/teacher_salary_invoice1.php where the date parameter can be manipulated to trigger a cross-site scripting (XSS) attack. Exploitation can be performed r...

CVE-2024-4652

Campcodes Complete Web-Based School Management System 1.0 contains a cross-site scripting flaw in /view/show_teacher2.php via the month parameter. The vulnerability is exploitable remotely and has been publicly disclosed. Affected component is an unknown function; root cause is input manipulation...

CVE-2024-4908

Campcodes Complete Web-Based School Management System 1.0 contains a SQL injection vulnerability in the /view/student_attendance_history1.php script. The issue arises from manipulation of the index parameter, enabling an injection remotely. The vulnerability entry notes that the attack may be ini...

CVE-2024-5232

CVE-2024-5232 affects Campcodes Complete Web-Based School Management System 1.0. A SQL injection vulnerability exists in an unknown part of /view/teacher_salary_details2.php caused by manipulation of the index argument. It can be exploited remotely and publicly disclosed exploits exist. CVSS metr...

CVE-2024-33411

The Campcodes Complete Web-Based School Management System version 1.0 is susceptible to a SQL injection vulnerability in the /model/get_admin_profile.php file. An attacker can execute arbitrary SQL commands by manipulating the my_index parameter, which may lead to unauthorized data access or modi...

CVE-2024-4513

Campcodes Complete Web-Based School Management System 1.0 is affected by a cross-site scripting vulnerability in the grade parameter of /view/timetable_update_form.php. Root cause: unsanitized user input leads to XSS. Impact: allows remote exploitation; exploitation details have been disclosed pu...

CVE-2024-4519

CVE-2024-4519 describes a Cross-Site Scripting vulnerability in Campcodes Complete Web-Based School Management System v1.0, triggered by manipulating the month parameter in /view/teacher_salary_details3.php. The issue is exploitable remotely and has been publicly disclosed. Affected component: fi...

CVE-2024-33405

The campcodes Complete Web-Based School Management System 1.0 is susceptible to an SQL injection vulnerability in the add_friends.php file. An attacker can exploit this flaw by providing malicious input through the friend_index parameter to execute arbitrary SQL commands. No specific remediation ...

CVE-2024-5235

CVE-2024-5235 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability exists in an unknown function of the file /view/teacher_salary_invoice.php, where manipulating the argument teacher_id leads to a SQL injection. It is exploitable remotely and the exploit has been d...

CVE-2024-5236

CVE-2024-5236 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in the file /view/teacher_salary_invoice1.php triggered by manipulating the date parameter. It is exploitable remotely, and public exploit information exists. Affected component ...

CVE-2024-4518

CVE-2024-4518 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in the /view/teacher_salary_invoice.php file caused by unsafely manipulating the desc parameter. It can be exploited remotely, with exploit information publicly disclo...

CVE-2024-4525

The CVE-2024-4525 entry describes a cross-site scripting (XSS) vulnerability in Campcodes Complete Web-Based School Management System 1.0, arising from manipulation of the index argument in the file /view/student_payment_details4.php. It affects unknown/unspecified code paths within that file and...

CVE-2024-5105

CVE-2024-5105 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability exists in an unknown portion of the file /view/student_payment_details.php, where manipulation of the argument index enables a SQL injection. Exploitation is possible remotely, and the exploit has b...

CVE-2024-5233

CVE-2024-5233 affects Campcodes Complete Web-Based School Management System 1.0. The issue is an SQL injection caused by manipulation of the index argument in the file /view/teacher_salary_details3.php. The vulnerability can be triggered remotely and the exploit has been disclosed publicly. The c...

CVE-2024-5104

The CVE-2024-5104 entry concerns Campcodes Complete Web-Based School Management System 1.0. Affected component: /view/student_grade_wise.php. Root cause: manipulation of the grade parameter enables SQL injection. Impacted outcomes include confidentiality, integrity, and availability as indicated ...

CVE-2024-5112

The CVE-2024-5112 entry concerns Campcodes Complete Web-Based School Management System 1.0. Affected code path: /view/student_profile.php, where the std_index parameter enables SQL injection. The vulnerability is remote-exploitable and referenced across multiple sources (NVD, Red Hat, CVE List, e...

CVE-2024-33407

The campcodes Complete Web-Based School Management System version 1.0 is vulnerable to an SQL injection flaw in the /model/delete_record.php API endpoint. The root cause is the improper neutralization of special elements in the id parameter, which allows an attacker to execute arbitrary SQL comma...

CVE-2024-4522

CVE-2024-4522 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in an unknown functionality of the file /view/teacher_salary_details.php, caused by manipulation of the index argument. Remote exploitation is possible, and the exploi...

CVE-2024-4649

CVE-2024-4649 affects Campcodes Complete Web-Based School Management System 1.0, specifically the /view/student_exam_mark_insert_form1.php file. The issue arises from manipulation of the page parameter, enabling cross-site scripting (XSS) and enabling remote exploitation. The vulnerability has be...

CVE-2024-33402

The campcodes Complete Web-Based School Management System version 1.0 is susceptible to a SQL injection vulnerability located in the /model/approve_petty_cash.php API endpoint. The root cause is the improper neutralization of special elements in the id parameter, which allows an attacker to execu...

CVE-2024-4515

CVE-2024-4515 concerns Campcodes Complete Web-Based School Management System 1.0. The issue is a cross-site scripting vulnerability in the unknown functionality of the file /view/timetable_grade_wise.php, triggered by manipulating the grade parameter. The attack can be launched remotely and the e...

CVE-2024-5106

CVE-2024-5106 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection in the file /view/student_payment_details3.php, caused by manipulating the index parameter. It is exploitable remotely and an exploit has been disclosed publicly. Various sources ...

CVE-2024-5114

The CVE-2024-5114 entry affects Campcodes Complete Web-Based School Management System 1.0, with a vulnerability in /view/teacher_attendance_history1.php where manipulation of the index parameter enables SQL injection. The flaw is exploitable remotely and has been disclosed publicly. Connected doc...

CVE-2024-5115

CVE-2024-5115 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in an unknown functionality of the file /view/teacher_profile.php triggered by manipulating the index parameter, with remote feasibility and public disclosure of exploits. Multip...

CVE-2024-4516

CVE-2024-4516 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting issue in the /view/timetable.php file, caused by tampering with the grade parameter. The issue is exploitable remotely and has had its exploit disclosed publicly. Documents...

CVE-2024-4527

CVE-2024-4527 affects Campcodes Complete Web-Based School Management System v1.0. The vulnerability is a cross-site scripting (XSS) flaw in an unknown function of the file /view/student_payment_details2.php where manipulation of the index argument enables attack execution. The issue can be exploi...