Lucene search

K
LopalopaResponsive School Management System

5 matches found

CVE
CVE
added 2024/08/07 4:15 p.m.36 views

CVE-2024-41251

An Incorrect Access Control vulnerability was found in /smsa/admin_teacher_register_approval.php and /smsa/admin_teacher_register_approval_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve Teacher registration.

6.5CVSS7.2AI score0.00168EPSS
CVE
CVE
added 2024/08/07 6:15 p.m.32 views

CVE-2024-41242

A Reflected Cross Site Scripting (XSS) vulnerability was found in /smsa/student_login.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter.

6.1CVSS6.6AI score0.00142EPSS
CVE
CVE
added 2024/08/07 4:15 p.m.21 views

CVE-2024-41252

An Incorrect Access Control vulnerability was found in /smsa/admin_student_register_approval.php and /smsa/admin_student_register_approval_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve student registration.

6.5CVSS7.2AI score0.00178EPSS
CVE
CVE
added 2024/08/07 6:15 p.m.17 views

CVE-2024-41241

A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/admin_login.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter.

6.1CVSS6.6AI score0.00148EPSS
CVE
CVE
added 2024/08/07 6:15 p.m.16 views

CVE-2024-41240

A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/teacher_login.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via the "error" parameter.

6.3CVSS6.3AI score0.00157EPSS