CVE-2024-34931

CVE-2024-34931 describes a SQL injection in Campcodes Complete Web-Based School Management System 1.0, exploitable via the parameter name in /model/update_subject.php. The root cause is unsanitized user input allowing arbitrary SQL commands, leading to high-impact outcomes across confidentiality,...

CVE-2024-34932

The CVE-2024-34932 entry concerns Campcodes Complete Web-Based School Management System 1.0. A SQL injection vulnerability exists in the /model/update_exam.php endpoint, exploitable via the name parameter to execute arbitrary SQL commands. The issue is described across multiple connected records ...

CVE-2024-34934

The CVE-2024-34934 entry concerns Campcodes Complete Web-Based School Management System 1.0. A SQL injection flaw exists in /view/emarks_range_grade_update_form.php, exploitable via the conversation_id parameter, allowing an attacker to execute arbitrary SQL commands. Impact is described as high ...

CVE-2024-34929

CVE-2024-34929 affects Campcodes Complete Web-Based School Management System version 1.0. The vulnerability is a SQL injection in the /view/find_friends.php endpoint, exploitable via the my_index parameter to execute arbitrary SQL commands. Root cause is insecure handling of user input in that AP...

CVE-2024-34935

CVE-2024-34935 : A SQL injection in Campcodes Complete Web-Based School Management System 1.0 affects the endpoint /view/conversation_history_admin.php via the conversation_id parameter. The underlying issue is improper handling of user-supplied input, enabling an attacker to execute arbitrary SQ...

CVE-2024-34927

The CVE-2024-34927 entry concerns a SQL injection in the Campcodes Complete Web-Based School Management System 1.0, specifically in the /model/update_classroom.php endpoint via the name parameter. The vulnerability allows an attacker to execute arbitrary SQL commands, with a critical impact profi...

CVE-2024-33411

CVE-2024-33411 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection in the /model/get_admin_profile.php endpoint, exploitable via the my_index parameter to execute arbitrary SQL commands. Impact is described as high confidentiality, integrity, an...

CVE-2024-33403

The CVE-2024-33403 describes a SQL injection in Campcodes Complete Web-Based School Management System 1.0, specifically in /model/get_events.php via the event_id parameter. Root cause: unsafely constructed SQL queries susceptible to arbitrary SQL execution. Impact: high severity with potential co...

CVE-2024-33409

CVE-2024-33409 describes an SQL injection in the Campcodes Complete Web-Based School Management System 1.0. The vulnerable component is the index.php and the name parameter; the underlying cause is improper input handling enabling arbitrary SQL execution. Documents indicate a high-severity impact...

CVE-2024-33408

CVE-2024-33408 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a SQL injection in the /model/get_classroom.php endpoint, exploitable via the id parameter, enabling an attacker to execute arbitrary SQL commands. The Red Hat, NVD, and CVE listings in the conn...

CVE-2024-33799

CVE-2024-33799 affects Campcodes Complete Web-Based School Management System 1.0, via the /model/get_teacher.php endpoint where the id parameter is used unsafely. The root cause is a SQL injection that allows an attacker to execute arbitrary SQL commands, enabling potentially complete compromise ...

CVE-2024-33800

CVE-2024-33800 affects Campcodes Complete Web-Based School Management System v1.0. A SQL injection is possible in the /model/get_student1.php endpoint, via the index parameter, enabling an attacker to execute arbitrary SQL commands. The vulnerability is documented across multiple sources (NVD/Red...

CVE-2024-33808

CVE-2024-33808 describes a SQL injection vulnerability in Campcodes Complete Web-Based School Management System 1.0, exploitable via the id parameter of /model/get_timetable.php. The root cause is improper handling of input in the timetable retrieval endpoint, allowing arbitrary SQL execution. Th...

CVE-2024-33806

CVE-2024-33806 affects campcodes Complete Web-Based School Management System 1.0. The vulnerability is in the /model/get_grade.php endpoint, where the id parameter enables a SQL injection. The underlying root cause is improper input handling, allowing an attacker to execute arbitrary SQL commands...

CVE-2024-33805

The CVE-2024-33805 issue affects Campcodes Complete Web-Based School Management System 1.0, specifically the /model/get_student.php endpoint. A SQL injection via the id parameter is used to execute arbitrary SQL commands, enabling high-severity impact on confidentiality, integrity, and availabili...

CVE-2024-33801

Affects: Campcodes Complete Web-Based School Management System v1.0. Vulnerable component: /model/get_subject_routing.php. Root cause: SQL injection via the id parameter that allows arbitrary SQL execution. Impact (per sources): high confidentiality, integrity, and availability implications; over...