CVE-2024-41248

The Kashipara Responsive School Management System v3.2.0 is susceptible to an Incorrect Access Control vulnerability in the /smsa/add_subject.php and /smsa/add_subject_submit.php endpoints. This flaw allows remote unauthenticated attackers to unauthorizedly add new subject entries. As a mitigatio...

CVE-2024-41244

An Incorrect Access Control vulnerability exists in the Kashipara Responsive School Management System v3.2.0 . The flaw is located in the /smsa/view_class.php endpoint, which allows remote unauthenticated attackers to view sensitive CLASS details . This could lead to unauthorized access to privat...

CVE-2024-41236

CVE-2024-41236 affects Kashipara Responsive School Management System v3.2.0. The vulnerability resides in /smsa/admin_login.php, where the username parameter of the Admin Login Page is susceptible to SQL injection. This allows an attacker to execute arbitrary SQL commands on the backend. Impact d...

CVE-2024-41239

The CVE-2024-41239 entry describes a Stored Cross-Site Scripting (XSS) in Kashipara/Responsive School Management System v3.2.0, specifically in /smsa/add_class_submit.php, where the class_name parameter can be exploited to execute arbitrary code. Connected sources (NVD, Red Hat, CVE lists) consis...

CVE-2024-41250

CVE-2024-41250 describes an Incorrect Access Control vulnerability in Kashipara Responsive School Management System v3.2.0. The weakness is in the /smsa/view_students.php endpoint, where remote, unauthenticated attackers can view STUDENT details due to access-control flaws. Reports from multiple ...

CVE-2024-41245

The Kashipara Responsive School Management System v3.2.0 contains an Incorrect Access Control vulnerability in the /smsa/view_teachers.php endpoint. This flaw allows remote unauthenticated attackers to view sensitive TEACHER details . To mitigate this risk, it is recommended to restrict access to...

CVE-2024-41249

An Incorrect Access Control vulnerability exists in the /smsa/view_subject.php endpoint of the Kashipara Responsive School Management System v3.2.0 . This flaw allows remote unauthenticated attackers to view sensitive SUBJECT details . As a temporary workaround, it is recommended to restrict acce...

CVE-2024-41237

CVE-2024-41237 concerns Kashipara Responsive School Management System v1.0, with a SQL injection in /smsa/teacher_login.php exploitable via the username parameter. The vulnerability allows arbitrary SQL execution, evidencing high impact on confidentiality, integrity, and availability (per CVSS 3....

CVE-2024-41238

CVE-2024-41238 affects Kashipara Responsive School Management System v1.0, with a SQL injection vulnerability in the /smsa/student_login.php endpoint. The issue is exploitable via the username parameter, enabling arbitrary SQL commands (no user interaction required). Industry sources consistently...

CVE-2024-41251

CVE-2024-41251 affects Kashipara Responsive School Management System v3.2.0. The issue is an Incorrect Access Control in /smsa/admin_teacher_register_approval.php and /smsa/admin_teacher_register_approval_submit.php that allows remote unauthenticated attackers to view and approve teacher registra...

CVE-2024-41243

CVE-2024-41243 : An Incorrect Access Control flaw exists in Kashipara Responsive School Management System v3.2.0, in the /smsa/view_marks.php endpoint. The vulnerability allows remote unauthenticated attackers to view MARKS details, exposing confidential student data. The public documents do not ...

CVE-2024-41242

CVE-2024-41242 is a Reflected Cross Site Scripting (XSS) vulnerability in Kashipara Responsive School Management System v3.2.0, occurring in /smsa/student_login.php via the error parameter. The related Red Hat and CVE records corroborate that remote attackers can inject scripts, with impact descr...

CVE-2024-41246

CVE-2024-41246 affects Kashipara Responsive School Management System v3.2.0. An Incorrect Access Control flaw in /smsa/admin_dashboard.php allows remote unauthenticated attackers to view the administrator dashboard. This is corroborated across multiple sources (NVD, Red Hat, CVE listings). The do...

CVE-2024-41241

Summary of CVE-2024-41241 : A reflected XSS vulnerability in Kashipara Responsive School Management System v3.2.0 affects the endpoint /smsa/admin_login.php , exploitable via the error parameter to execute arbitrary code in affected deployments. Public risk details vary: NVD lists a CVSS‑3.1 base...

CVE-2024-41252

Kashipara Responsive School Management System v3.2.0 contains an Incorrect Access Control flaw affecting /smsa/admin_student_register_approval.php and /smsa/admin_student_register_approval_submit.php. Remote, unauthenticated attackers can view and approve student registrations due to insufficient...

CVE-2024-41247

An Incorrect Access Control vulnerability exists in Kashipara Responsive School Management System v3.2.0 . The flaw is located in the /smsa/add_class.php and /smsa/add_class_submit.php endpoints, which allows remote unauthenticated attackers to add new class entries. As a workaround, it is recomm...

CVE-2024-41240

CVE-2024-41240 affects Kashipara Responsive School Management System v3.2.0. The Reflected XSS exists in /smsa/teacher_login.php via the error parameter, enabling remote attackers to execute arbitrary code. Documented CVSS metrics show median impact with low integrity/I, low confidentiality, and ...