Priority HIGH 82
A SQL injection vulnerability in /model/update_exam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-23 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-23 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/update_classroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-23 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2024-05-28 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_admin_profile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the my_index parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00713 · Published 2024-05-06 · No fix listed CWE-89
Priority HIGH 82
SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00713 · Published 2024-05-06 · No fix listed CWE-89
Priority HIGH 82
A SQL injection vulnerability in /model/get_classroom.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00713 · Published 2024-05-06 · No fix listed CWE-89
Priority HIGH 82
install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07883 · Published 2023-08-16 · No fix listed CWE-434
Priority HIGH 81
CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_order_items.php?id= .
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00405 · Published 2024-07-24 · No fix listed CWE-89
Priority HIGH 81
A vulnerability, which was classified as critical, was found in Campcodes Church Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01067 · Published 2024-04-10 · No fix listed CWE-89
Priority HIGH 81
A vulnerability, which was classified as critical, has been found in Campcodes Church Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01067 · Published 2024-04-10 · No fix listed CWE-89
Priority HIGH 78
A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00377 · Published 2024-05-23 · No fix listed CWE-89
Priority HIGH 76
A vulnerability was found in Campcodes Online College Library System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00636 · Published 2023-12-30 · No fix listed CWE-89
Priority HIGH 75
A vulnerability was found in Campcodes House Rental Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00774 · Published 2024-03-26 · No fix listed CWE-73
Priority HIGH 75
A vulnerability classified as critical has been found in Campcodes Retro Cellphone Online Store 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00783 · Published 2023-06-02 · No fix listed CWE-89
Priority HIGH 75
A vulnerability classified as critical has been found in Campcodes Coffee Shop POS System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01637 · Published 2023-04-21 · No fix listed CWE-89
Priority HIGH 75
A vulnerability classified as critical was found in Campcodes Online Thesis Archiving System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00766 · Published 2023-04-18 · No fix listed CWE-89
Priority HIGH 75
A vulnerability classified as critical has been found in Campcodes Online Thesis Archiving System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00766 · Published 2023-04-18 · No fix listed CWE-89
Priority HIGH 75
A vulnerability was found in Campcodes Video Sharing Website 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00791 · Published 2023-04-14 · No fix listed CWE-89
Priority HIGH 74
Cross Site Scripting vulnerability in Campcodes Online Marriage Registration System v.1.0 allows a remote attacker to execute arbitrary code via the text fields in the marriage registration request form.
CVSS 3.1CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.00698 · Published 2024-03-28 · No fix listed CWE-79
Load more