Campcodes

Records634All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical40CVSS 9.0–10.0

CVSS high75CVSS 7.0–8.9

Exploited now

Campcodes records in CISA KEV

No Campcodes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Complete Web-based School Management System 104 records HIGH Sales And Inventory System 39 records HIGH Online Job Finder System 23 records HIGH Beauty Salon Management System 21 records HIGH Online Hospital Management System 21 records HIGH Online Learning Management System 21 records HIGH Advanced Online Voting System 20 records HIGH Supplier Management System 19 records HIGH

Records

104 records in Complete Web-based School Management System · all components

TI-2024-23142 CVE-2024-34932 · GHSA-57w2-rvhr-q6hq

A SQL injection vulnerability in /model/update_exam.php in Campcodes Complete Web-Based…

HIGH 82

A SQL injection vulnerability in /model/update_exam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-05-23 No fix listed CWE-89

TI-2024-23141 CVE-2024-34931 · GHSA-92vx-8h67-43cg

A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete…

HIGH 82

A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-05-23 No fix listed CWE-89

TI-2024-23137 CVE-2024-34927 · GHSA-vf5p-pgqg-rxgw

A SQL injection vulnerability in /model/update_classroom.php in Campcodes Complete…

HIGH 82

A SQL injection vulnerability in /model/update_classroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-05-23 No fix listed CWE-89

TI-2024-22318 CVE-2024-33808

A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based…

HIGH 82

A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-05-28 No fix listed CWE-89

TI-2024-22316 CVE-2024-33806

A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based…

HIGH 82

A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-05-28 No fix listed CWE-89

TI-2024-22315 CVE-2024-33805

A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based…

HIGH 82

A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-05-28 No fix listed CWE-89

TI-2024-22311 CVE-2024-33801

A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete…

HIGH 82

A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-05-28 No fix listed CWE-89

TI-2024-22310 CVE-2024-33800

A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based…

HIGH 82

A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-05-28 No fix listed CWE-89

TI-2024-22309 CVE-2024-33799

A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based…

HIGH 82

A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-05-28 No fix listed CWE-89

TI-2024-22054 CVE-2024-33411 · GHSA-9g7x-rcc4-g9h9

A SQL injection vulnerability in /model/get_admin_profile.php in Campcodes Complete…

HIGH 82

A SQL injection vulnerability in /model/get_admin_profile.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the my_index parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00713 Published 2024-05-06 No fix listed CWE-89

TI-2024-22052 CVE-2024-33409 · GHSA-f839-3vrj-wvgw

SQL injection vulnerability in index.php in campcodes Complete Web-Based School…

HIGH 82

SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00713 Published 2024-05-06 No fix listed CWE-89

TI-2024-22051 CVE-2024-33408 · GHSA-jmvf-qrv2-jjwq

A SQL injection vulnerability in /model/get_classroom.php in campcodes Complete Web-Based…

HIGH 82

A SQL injection vulnerability in /model/get_classroom.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00713 Published 2024-05-06 No fix listed CWE-89

TI-2024-23146 CVE-2024-34936 · GHSA-xrfh-hjjx-5xpx

A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School…

HIGH 78

A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00377 Published 2024-05-23 No fix listed CWE-89

TI-2024-22053 CVE-2024-33410 · GHSA-w96c-mpgg-prqv

SQL injection vulnerability in /model/delete_range_grade.php in campcodes Complete…

HIGH 70

SQL injection vulnerability in /model/delete_range_grade.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00641 Published 2024-05-06 No fix listed CWE-89

TI-2024-23138 CVE-2024-34928 · GHSA-74p7-wfqr-638p

A SQL injection vulnerability in /model/update_subject_routing.php in Campcodes Complete…

HIGH 65

A SQL injection vulnerability in /model/update_subject_routing.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00317 Published 2024-05-23 No fix listed CWE-89

TI-2024-22049 CVE-2024-33406 · GHSA-mqrq-8fm6-x78m

SQL injection vulnerability in /model/delete_student_grade_subject.php in campcodes…

HIGH 65

SQL injection vulnerability in /model/delete_student_grade_subject.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00434 Published 2024-05-06 No fix listed CWE-89

TI-2024-04855 CVE-2024-5231 · GHSA-5vv5-c3pg-26m2

Campcodes Complete Web-Based School Management System teacher_salary_details.php sql injection

MEDIUM 63

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00407 Published 2024-05-23 No fix listed CWE-89

TI-2024-04564 CVE-2024-4908 · GHSA-xr8x-f92g-w7rv

Campcodes Complete Web-Based School Management System student_attendance_history1.php sql injection

MEDIUM 63

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00407 Published 2024-05-15 No fix listed CWE-89

TI-2024-22312 CVE-2024-33802

A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete…

MEDIUM 62

A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00426 Published 2024-05-28 No fix listed CWE-89

TI-2024-04328 CVE-2024-4652 · GHSA-44gv-hrfj-mvj4

Campcodes Complete Web-Based School Management System show_teacher2.php cross site scripting

MEDIUM 60

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00441 Published 2024-05-08 No fix listed CWE-79

TI-2024-04326 CVE-2024-4650 · GHSA-vhmj-v5p6-jwhv

Campcodes Complete Web-Based School Management System student_due_payment.php cross site scripting

MEDIUM 60

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00431 Published 2024-05-08 No fix listed CWE-79

TI-2024-04324 CVE-2024-4648 · GHSA-qffg-p58p-854c

Campcodes Complete Web-Based School Management System student_exam_mark_update_form.php cross site scripting

MEDIUM 60

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00447 Published 2024-05-08 No fix listed CWE-79

TI-2024-04212 CVE-2024-4525 · GHSA-mg6w-wrgc-mrcc

Campcodes Complete Web-Based School Management System student_payment_details4.php cross site scripting

MEDIUM 60

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0056 Published 2024-05-06 No fix listed CWE-79

TI-2024-04211 CVE-2024-4524 · GHSA-939c-5vmm-mjp9

Campcodes Complete Web-Based School Management System student_payment_invoice.php cross site scripting

MEDIUM 60

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00582 Published 2024-05-06 No fix listed CWE-79

TI-2024-04208 CVE-2024-4521 · GHSA-cg6c-44pq-gx4v

Campcodes Complete Web-Based School Management System teacher_salary_details2.php cross site scripting

MEDIUM 60

A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00608 Published 2024-05-06 No fix listed CWE-79

Open these records in search →