CVE-2024-34933

Campcodes Complete Web-Based School Management System 1.0 contains a SQL injection vulnerability in the /model/update_grade.php endpoint, exploitable via the admission_fee parameter. The issue allows an attacker to execute arbitrary SQL commands. Multiple connected sources (Red Hat, NVD/CNVD-like...

CVE-2024-4521

CVE-2024-4521 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in the unknown function of the file /view/teacher_salary_details2.php caused by manipulation of the index parameter. It is remotely exploitable and the exploit has bee...

CVE-2024-4523

CVE-2024-4523 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability arises from cross-site scripting in the year parameter of the file /view/teacher_attendance_history1.php, enabling remote exploitation. Multiple connected sources confirm the issue and its public di...

CVE-2024-4526

CVE-2024-4526 affects Campcodes Complete Web-Based School Management System 1.0. The issue is a cross-site scripting vulnerability in the month parameter of /view/student_payment_details3.php. Attack could be initiated remotely and the exploit has been publicly disclosed. Multiple connected sourc...

CVE-2024-5240

The CVE-2024-5240 entry pertains to Campcodes Complete Web-Based School Management System v1.0, with a SQL injection in the /view/unread_msg.php file caused by manipulating the my_index argument. Multiple connected sources confirm remote exploitation and public disclosure of the exploit. Concrete...

CVE-2024-4648

Campcodes Complete Web-Based School Management System v1.0 contains a cross-site scripting (XSS) vulnerability in the /view/student_exam_mark_update_form.php file, triggered by manipulating the std_index parameter. Publicly disclosed exploits indicate remote attack potential. Connected sources co...

CVE-2024-5238

CVE-2024-5238 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in an unknown part of /view/timetable_insert_form.php triggered by manipulating the grade parameter. It can be exploited remotely and has publicly disclosed exploit information (...

CVE-2024-5237

CVE-2024-5237 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection in /view/timetable_grade_wise.php driven by unsafely manipulated grade parameter. Root cause: improper handling of user input enables attacker-controlled SQL execution remotely; c...

CVE-2024-5234

CVE-2024-5234 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection caused by manipulation of the argument index in the file /view/teacher_salary_history1.php, enabling remote attack. Exploit has been disclosed publicly. Documentation confirms the...

CVE-2024-5239

The CVE-2024-5239 issue affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability resides in the /view/timetable_update_form.php code path where manipulation of the grade parameter enables SQL injection. It is exploitable remotely, and public disclosure of the exploit i...

CVE-2024-4647

CVE-2024-4647 affects Campcodes Complete Web-Based School Management System 1.0. A cross-site scripting vulnerability exists in an unknown functionality of the file /view/student_first_payment.php, triggered by manipulating the index parameter. Exploitation is possible remotely, and public disclo...

CVE-2024-5232

CVE-2024-5232 affects Campcodes Complete Web-Based School Management System 1.0. A SQL injection vulnerability exists in an unknown part of /view/teacher_salary_details2.php caused by manipulation of the index argument. It can be exploited remotely and publicly disclosed exploits exist. CVSS metr...

CVE-2024-4514

CVE-2024-4514 affects Campcodes Complete Web-Based School Management System 1.0 . The vulnerability is in the file /view/timetable_insert_form.php, where manipulating the grade argument can trigger a cross-site scripting (XSS) vulnerability. The issue is exploitable remotely, and exploits have be...

CVE-2024-4517

CVE-2024-4517 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability exists in an unknown portion of the file /view/teacher_salary_invoice1.php where the date parameter can be manipulated to trigger a cross-site scripting (XSS) attack. Exploitation can be performed r...

CVE-2024-4650

CVE-2024-4650 affects Campcodes Complete Web-Based School Management System 1.0. A cross-site scripting flaw exists in the due_month parameter of /view/student_due_payment.php, allowing remote exploitation. The issue stems from manipulation of due_month in that script, enabling XSS. Public exploi...

CVE-2024-4519

CVE-2024-4519 describes a Cross-Site Scripting vulnerability in Campcodes Complete Web-Based School Management System v1.0, triggered by manipulating the month parameter in /view/teacher_salary_details3.php. The issue is exploitable remotely and has been publicly disclosed. Affected component: fi...

CVE-2024-4652

Campcodes Complete Web-Based School Management System 1.0 contains a cross-site scripting flaw in /view/show_teacher2.php via the month parameter. The vulnerability is exploitable remotely and has been publicly disclosed. Affected component is an unknown function; root cause is input manipulation...

CVE-2024-5236

CVE-2024-5236 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in the file /view/teacher_salary_invoice1.php triggered by manipulating the date parameter. It is exploitable remotely, and public exploit information exists. Affected component ...

CVE-2024-4908

Campcodes Complete Web-Based School Management System 1.0 contains a SQL injection vulnerability in the /view/student_attendance_history1.php script. The issue arises from manipulation of the index parameter, enabling an injection remotely. The vulnerability entry notes that the attack may be ini...

CVE-2024-5235

CVE-2024-5235 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability exists in an unknown function of the file /view/teacher_salary_invoice.php, where manipulating the argument teacher_id leads to a SQL injection. It is exploitable remotely and the exploit has been d...

CVE-2024-4525

The CVE-2024-4525 entry describes a cross-site scripting (XSS) vulnerability in Campcodes Complete Web-Based School Management System 1.0, arising from manipulation of the index argument in the file /view/student_payment_details4.php. It affects unknown/unspecified code paths within that file and...

CVE-2024-4513

Campcodes Complete Web-Based School Management System 1.0 is affected by a cross-site scripting vulnerability in the grade parameter of /view/timetable_update_form.php. Root cause: unsanitized user input leads to XSS. Impact: allows remote exploitation; exploitation details have been disclosed pu...

CVE-2024-5112

The CVE-2024-5112 entry concerns Campcodes Complete Web-Based School Management System 1.0. Affected code path: /view/student_profile.php, where the std_index parameter enables SQL injection. The vulnerability is remote-exploitable and referenced across multiple sources (NVD, Red Hat, CVE List, e...

CVE-2024-4518

CVE-2024-4518 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in the /view/teacher_salary_invoice.php file caused by unsafely manipulating the desc parameter. It can be exploited remotely, with exploit information publicly disclo...

CVE-2024-5233

CVE-2024-5233 affects Campcodes Complete Web-Based School Management System 1.0. The issue is an SQL injection caused by manipulation of the index argument in the file /view/teacher_salary_details3.php. The vulnerability can be triggered remotely and the exploit has been disclosed publicly. The c...

CVE-2024-5115

CVE-2024-5115 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in an unknown functionality of the file /view/teacher_profile.php triggered by manipulating the index parameter, with remote feasibility and public disclosure of exploits. Multip...

CVE-2024-4522

CVE-2024-4522 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in an unknown functionality of the file /view/teacher_salary_details.php, caused by manipulation of the index argument. Remote exploitation is possible, and the exploi...

CVE-2024-4649

CVE-2024-4649 affects Campcodes Complete Web-Based School Management System 1.0, specifically the /view/student_exam_mark_insert_form1.php file. The issue arises from manipulation of the page parameter, enabling cross-site scripting (XSS) and enabling remote exploitation. The vulnerability has be...

CVE-2024-5114

The CVE-2024-5114 entry affects Campcodes Complete Web-Based School Management System 1.0, with a vulnerability in /view/teacher_attendance_history1.php where manipulation of the index parameter enables SQL injection. The flaw is exploitable remotely and has been disclosed publicly. Connected doc...

CVE-2024-4515

CVE-2024-4515 concerns Campcodes Complete Web-Based School Management System 1.0. The issue is a cross-site scripting vulnerability in the unknown functionality of the file /view/timetable_grade_wise.php, triggered by manipulating the grade parameter. The attack can be launched remotely and the e...

CVE-2024-4516

CVE-2024-4516 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting issue in the /view/timetable.php file, caused by tampering with the grade parameter. The issue is exploitable remotely and has had its exploit disclosed publicly. Documents...

CVE-2024-4527

CVE-2024-4527 affects Campcodes Complete Web-Based School Management System v1.0. The vulnerability is a cross-site scripting (XSS) flaw in an unknown function of the file /view/student_payment_details2.php where manipulation of the index argument enables attack execution. The issue can be exploi...

CVE-2024-5110

CVE-2024-5110 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in /view/student_payment_invoice.php triggered by manipulation of the index parameter. An attacker may exploit remotely; public disclosure of the exploit is indicated. No concret...

CVE-2024-33802

CVE-2024-33802 describes an SQL injection in Campcodes Complete Web-Based School Management System 1.0. The vulnerability affects /model/get_student_subject.php and is exploitable via the index parameter, allowing an attacker to execute arbitrary SQL commands. Exploitation status is not provided ...

CVE-2024-4524

CVE-2024-4524 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting in the /view/student_payment_invoice.php file via manipulation of the desc parameter. It is exploitable remotely and an exploit has been disclosed publicly. The available d...

CVE-2024-4907

The CVE-2024-4907 vulnerability affects Campcodes Complete Web-Based School Management System 1.0. It resides in the file /view/show_student2.php and stems from manipulation of the grade parameter, enabling SQL injection. This was described as exploitable remotely and publicly disclosed, with evi...

CVE-2024-5109

CVE-2024-5109 concerns Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection in an unknown function of the file /view/student_payment_history.php, triggered by manipulating the index argument. It is exploitable remotely, and the exploit has been publicly ...

CVE-2024-5231

CVE-2024-5231 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in an unknown function tied to the file /view/teacher_salary_details.php, caused by manipulation of the index parameter. Exploitation can be remote, and public exploit informatio...

CVE-2024-5107

CVE-2024-5107 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability arises from manipulation of the index parameter in the file /view/student_payment_details2.php, enabling SQL injection. It is a remote attack and the exploit has been disclosed publicly. Multiple so...

CVE-2024-5113

CVE-2024-5113 affects Campcodes Complete Web-Based School Management System 1.0. A SQL injection vulnerability exists in /view/student_profile1.php via the std_index parameter, reportet remotely with publicly disclosed exploit details. Multiple sources classify the issue as critical/medium depend...

CVE-2024-33804

CVE-2024-33804 affects campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection in /model/get_subject.php through the id parameter, allowing a attacker to execute arbitrary SQL commands. Publicly available sources in the connected set consistently describe t...

CVE-2024-4646

CVE-2024-4646 affects Campcodes Complete Web-Based School Management System version 1.0, specifically the /view/student_payment_details.php file. The vulnerability is a cross-site scripting (XSS) flaw caused by manipulation of the index parameter, allowing remote attack. Exploitation has been pub...

CVE-2024-5111

The CVE-2024-5111 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability arises from SQL injection in an unknown part of the file /view/student_payment_invoice1.php, triggered by manipulating the date argument. It is exploitable remotely and the exploit has been disc...

CVE-2024-4651

The CVE-2024-4651 entry concerns Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in the year parameter of /view/student_attendance_history1.php, arising from how the input is processed. This could allow remote attackers to execute arbitr...

CVE-2024-4909

CVE-2024-4909 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in the unknown function handling the parameter due_year of the file /view/student_due_payment.php. Exploitation can be performed remotely, and the vulnerability has been publicly...

CVE-2024-4718

CVE-2024-4718 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerable component is an unknown function in /model/delete_student_grade_subject.php, where manipulation of the index parameter enables cross-site scripting. Exploitation can be performed remotely, and public d...

CVE-2024-4910

The CVE-2024-4910 issue affects Campcodes Complete Web-Based School Management System 1.0. Affects an unknown functionality in the file /view/student_exam_mark_insert_form1.php, where manipulating the grade parameter enables SQL injection. The vulnerability can be exploited remotely and has been ...

CVE-2024-4911

CVE-2024-4911 affects Campcodes Complete Web-Based School Management System v1.0. The vulnerability is in /view/student_exam_mark_update_form.php where manipulation of the exam parameter enables SQL injection, admitting remote exploitation. Multiple connected sources confirm the issue without det...

CVE-2024-4678

Campcodes Complete Web-Based School Management System 1.0 contains a cross-site scripting vulnerability in the /view/find_friends.php page. The my_type parameter can be manipulated to trigger XSS, with remote exploitation indicated and public disclosure of the exploit. Connected sources consisten...

CVE-2024-5108

CVE-2024-5108 affects Campcodes Complete Web-Based School Management System version 1.0. Affected is an unknown function in /view/student_payment_details4.php where manipulation of the index parameter causes SQL injection. The vulnerability can be exploited remotely; the exploit has been disclose...