CVE-2024-34930

CVE-2024-34930 affects Campcodes Complete Web-Based School Management System 1.0; a SQL injection exists in /model/all_events1.php exploitable via the month parameter, enabling arbitrary SQL commands and impacting data integrity/availability. Root cause/technical details beyond the Initial descri...

CVE-2024-33803

CVE-2024-33803 affects Campcodes Complete Web-Based School Management System 1.0. A SQL injection exists in /model/get_exam.php via the id parameter, enabling arbitrary SQL commands as described in multiple sources. The vulnerability is documented with a CVSS v3.1 base score of 5.4 (Medium) with ...

CVE-2024-33407

CVE-2024-33407 describes a SQL injection vulnerability in Campcodes Complete Web-Based School Management System v1.0, specifically in the /model/delete_record.php script where an unsafely handled id parameter allows an attacker to execute arbitrary SQL commands. Affected product: Complete Web-Bas...

CVE-2024-33807

CVE-2024-33807 : A SQL injection flaw in Campcodes’ Complete Web-Based School Management System v1.0 affects the endpoint /model/get_teacher_timetable.php. The vulnerability allows an attacker to inject arbitrary SQL through the grade parameter. Public sources in the connected documents consisten...

CVE-2024-4721

CVE-2024-4721 affects Campcodes Complete Web-Based School Management System 1.0, impacting an unknown part of /model/add_student_subject.php where manipulation of the index parameter enables cross-site scripting. The vulnerability can be triggered remotely and has been disclosed publicly. Connect...