CVE-2024-4672

The CVE-2024-4672 entry describes a cross-site scripting vulnerability in Campcodes Complete Web-Based School Management System 1.0, affecting the file /view/show_student_subject.php. The vulnerability is triggered by manipulating the id parameter, enabling a remote attacker to exploit XSS. Publi...

CVE-2024-4686

CVE-2024-4686 affects Campcodes Complete Web-Based School Management System 1.0. The issue is a cross-site scripting vulnerability in the grade parameter of the /view/emarks_range_grade_update_form.php script. The flaws arise from manipulation of the grade argument and may be exploited remotely; ...

CVE-2024-4674

CVE-2024-4674 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability resides in the /view/show_friend_request.php page, where unsafely handling the my_index parameter enables cross-site scripting. The issue can be triggered remotely and exploit details have been publ...

CVE-2024-4673

CVE-2024-4673 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is in the file /view/show_student_grade_subject.php, where manipulating the argument id enables cross-site scripting. The issue is exploitable remotely and exploitation has been disclosed publicly. ...