CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4684 – Campcodes Complete Web-Based School Management System exam_timetable_grade_wise.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-4684
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /view/exam_timetable_grade_wise.php. The manipulation of the argument exam leads to cross site scripting. It is possible to initiate the attack remotely. • https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2031.pdf https://vuldb.com/?ctiid.263625 https://vuldb.com/?id.263625 https://vuldb.com/?submit.331774 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4683 – Campcodes Complete Web-Based School Management System exam_timetable_insert_form.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-4683
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /view/exam_timetable_insert_form.php. The manipulation of the argument exam leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2030.pdf https://vuldb.com/?ctiid.263624 https://vuldb.com/?id.263624 https://vuldb.com/?submit.331773 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4682 – Campcodes Complete Web-Based School Management System exam_timetable_update_form.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-4682
A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /view/exam_timetable_update_form.php. The manipulation of the argument exam leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2029.pdf https://vuldb.com/?ctiid.263623 https://vuldb.com/?id.263623 https://vuldb.com/?submit.331772 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4681 – Campcodes Legal Case Management System Setting general-setting unrestricted upload
https://notcve.org/view.php?id=CVE-2024-4681
A vulnerability, which was classified as critical, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/general-setting of the component Setting Handler. The manipulation of the argument favicon/logo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/file_upload.md https://vuldb.com/?ctiid.263622 https://vuldb.com/?id.263622 https://vuldb.com/?submit.331468 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4678 – Campcodes Complete Web-Based School Management System find_friends.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-4678
A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /view/find_friends.php. The manipulation of the argument my_type leads to cross site scripting. The attack can be launched remotely. • https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2028.pdf https://vuldb.com/?ctiid.263599 https://vuldb.com/?id.263599 https://vuldb.com/?submit.331315 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •