← Back

Complete Web Based School Management System

complete_web-based_school_management_system

Vendor: Campcodes • 104 CVEs

CVEs (104)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-33402
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 28, 2024
N/A· v4
8.1 HIGH· v3
N/A· v2
A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.
CVE-2024-33808
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 28, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVE-2024-33807
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 28, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter.
CVE-2024-33806
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 28, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVE-2024-33805
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 28, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVE-2024-33804
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 28, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVE-2024-33803
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 28, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVE-2024-33802
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 28, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter.
CVE-2024-33801
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 28, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVE-2024-33800
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 28, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter.
CVE-2024-33799
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 28, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.
CVE-2024-34936
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 23, 2024
N/A· v4
8.6 HIGH· v3
N/A· v2
A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter.
CVE-2024-34935
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 23, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in /view/conversation_history_admin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversation_id parameter.
CVE-2024-34934
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 23, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in /view/emarks_range_grade_update_form.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversation_id paramete...Show more
A SQL injection vulnerability in /view/emarks_range_grade_update_form.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversation_id parameter.Show less
CVE-2024-34933
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 23, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
A SQL injection vulnerability in /model/update_grade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admission_fee parameter.
CVE-2024-34932
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 23, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in /model/update_exam.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.
CVE-2024-34931
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 23, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.
CVE-2024-34930
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 23, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
A SQL injection vulnerability in /model/all_events1.php in Campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the month parameter.
CVE-2024-34929
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 23, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A SQL injection vulnerability in /view/find_friends.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the my_index parameter.
CVE-2024-34928
1Campcodes
1Complete Web Based School Management System
Jun 17, 2026
May 23, 2024
N/A· v4
7.3 HIGH· v3
N/A· v2
A SQL injection vulnerability in /model/update_subject_routing.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter.