Campcodes Complete Web Based School Management System vulnerabilities, page 5
104 vulnerabilities
Known vulnerabilities in Campcodes Complete Web Based School Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-34932campcodescomplete_web-based_school_management_system
EPSS score0.51%
A SQL injection vulnerability in /model/update_exam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.CVE-2024-34930campcodescomplete_web-based_school_management_systemEPSS score0.22%
A SQL injection vulnerability in /model/all_events1.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the month parameter.CVE-2024-34931campcodescomplete_web-based_school_management_systemEPSS score0.51%
A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.CVE-2024-34933campcodescomplete_web-based_school_management_systemEPSS score0.30%
A SQL injection vulnerability in /model/update_grade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admission_fee parameter.CVE-2024-33806campcodescomplete_web-based_school_management_systemEPSS score0.51%
A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.CVE-2024-33405campcodescomplete_web-based_school_management_systemEPSS score0.52%
SQL injection vulnerability in add_friends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friend_index parameter.CVE-2024-33800campcodescomplete_web-based_school_management_systemEPSS score0.51%
A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter.CVE-2024-33807campcodescomplete_web-based_school_management_systemEPSS score0.29%
A SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter.CVE-2024-33803campcodescomplete_web-based_school_management_systemEPSS score0.29%
A SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.CVE-2024-33409campcodescomplete_web-based_school_management_systemEPSS score0.71%
SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter.CVE-2024-33801campcodescomplete_web-based_school_management_systemEPSS score0.51%
A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.CVE-2024-33804campcodescomplete_web-based_school_management_systemEPSS score0.30%
A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.CVE-2024-33402campcodescomplete_web-based_school_management_systemEPSS score0.44%
A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.CVE-2024-33406campcodescomplete_web-based_school_management_systemEPSS score0.43%
SQL injection vulnerability in /model/delete_student_grade_subject.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter.CVE-2024-33408campcodescomplete_web-based_school_management_systemEPSS score0.71%
A SQL injection vulnerability in /model/get_classroom.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.CVE-2024-33802campcodescomplete_web-based_school_management_systemEPSS score0.43%
A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter.CVE-2024-33404campcodescomplete_web-based_school_management_systemEPSS score0.56%
A SQL injection vulnerability in /model/add_student_first_payment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter.CVE-2024-33410campcodescomplete_web-based_school_management_systemEPSS score0.64%
SQL injection vulnerability in /model/delete_range_grade.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.CVE-2024-33407campcodescomplete_web-based_school_management_systemEPSS score0.26%
SQL injection vulnerability in /model/delete_record.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.CVE-2024-33808campcodescomplete_web-based_school_management_systemEPSS score0.51%
A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.