CVE-2024-34936

Campcodes Complete Web-Based School Management System 1.0 has a SQL injection in /view/event1.php triggered by the month parameter. The vulnerability allows execution of arbitrary SQL commands, with CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L (8.6, HIGH). Root cause: unsanitized/u...

CVE-2024-5103

CVE-2024-5103 affects Campcodes Complete Web-Based School Management System v1.0. The vulnerability is an SQL injection in the file /view/student_first_payment.php caused by manipulation of the grade parameter. It is exploitable remotely, with the exploit publicly disclosed. Details across source...

CVE-2024-33405

CVE-2024-33405 concerns the Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in the add_friends.php script, exploitable via the friend_index parameter, allowing an attacker to execute arbitrary SQL commands. The description across connected document...

CVE-2024-5104

The CVE-2024-5104 entry concerns Campcodes Complete Web-Based School Management System 1.0. Affected component: /view/student_grade_wise.php. Root cause: manipulation of the grade parameter enables SQL injection. Impacted outcomes include confidentiality, integrity, and availability as indicated ...

CVE-2024-5105

CVE-2024-5105 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability exists in an unknown portion of the file /view/student_payment_details.php, where manipulation of the argument index enables a SQL injection. Exploitation is possible remotely, and the exploit has b...

CVE-2024-33402

CVE-2024-33402 affects Campcodes Complete Web-Based School Management System 1.0. A SQL injection exists in /model/approve_petty_cash.php via the id parameter, allowing arbitrary SQL commands. CVSS 3.1 BASE score 8.1 (HIGH) with network attack vector, low complexity, low privileges required, no u...

CVE-2024-5106

CVE-2024-5106 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection in the file /view/student_payment_details3.php, caused by manipulating the index parameter. It is exploitable remotely and an exploit has been disclosed publicly. Various sources ...

CVE-2024-33404

CVE-2024-33404 describes a SQL injection in campcodes Complete Web-Based School Management System 1.0, via the index parameter in /model/add_student_first_payment.php. The vulnerability affects the web app’s ability to execute arbitrary SQL commands, with a CVSS 3.1 base score of 8.3 (HIGH) and i...

CVE-2024-33410

CVE-2024-33410 is an SQL injection vulnerability affecting Campcodes Complete Web-Based School Management System 1.0, specifically in /model/delete_range_grade.php via the id parameter. The incident is described across multiple sources (NVD/Red Hat/CNNVD/CVE/CVELIST) with CVSS v3.1 base metrics: ...