📦

complete_web-based_school_management_system

Vendor: campcodes

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 104 Total Indexed
Avg. EPSS 0.51% Exploit Prob.
Latest CVE CVE-2024-33402 May 28

Security Vulnerability Index

Page 1 / 11
8.1 CVSS
CVE-2024-33402

A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.

EPSS: 0.44%
9.8 CVSS
CVE-2024-33808

A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.

EPSS: 0.51%
5.4 CVSS
CVE-2024-33807

A SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter.

EPSS: 0.29%
9.8 CVSS
CVE-2024-33806

A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.

EPSS: 0.51%
9.8 CVSS
CVE-2024-33805

A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.

EPSS: 0.51%
6.3 CVSS
CVE-2024-33804

A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.

EPSS: 0.30%
5.4 CVSS
CVE-2024-33803

A SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.

EPSS: 0.29%
6.5 CVSS
CVE-2024-33802

A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter.

EPSS: 0.43%
9.8 CVSS
CVE-2024-33801

A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.

EPSS: 0.51%
9.8 CVSS
CVE-2024-33800

A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter.

EPSS: 0.51%