Show filters
17 Total Results
Displaying 1-10 of 17
Sort by:
Attacker Value
Unknown
CVE-2024-41236
Disclosure Date: August 28, 2024 (last updated August 31, 2024)
A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Page
0
Attacker Value
Unknown
CVE-2024-41238
Disclosure Date: August 08, 2024 (last updated August 13, 2024)
A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter.
0
Attacker Value
Unknown
CVE-2024-41239
Disclosure Date: August 07, 2024 (last updated August 09, 2024)
A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "class_name" parameter field.
0
Attacker Value
Unknown
CVE-2024-41237
Disclosure Date: August 07, 2024 (last updated August 09, 2024)
A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter.
0
Attacker Value
Unknown
CVE-2024-41242
Disclosure Date: August 07, 2024 (last updated August 09, 2024)
A Reflected Cross Site Scripting (XSS) vulnerability was found in /smsa/student_login.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter.
0
Attacker Value
Unknown
CVE-2024-41241
Disclosure Date: August 07, 2024 (last updated August 09, 2024)
A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/admin_login.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter.
0
Attacker Value
Unknown
CVE-2024-41240
Disclosure Date: August 07, 2024 (last updated August 09, 2024)
A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/teacher_login.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via the "error" parameter.
0
Attacker Value
Unknown
CVE-2024-41250
Disclosure Date: August 07, 2024 (last updated August 09, 2024)
An Incorrect Access Control vulnerability was found in /smsa/view_students.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view STUDENT details.
0
Attacker Value
Unknown
CVE-2024-41245
Disclosure Date: August 07, 2024 (last updated August 09, 2024)
An Incorrect Access Control vulnerability was found in /smsa/view_teachers.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view TEACHER details.
0
Attacker Value
Unknown
CVE-2024-41244
Disclosure Date: August 07, 2024 (last updated August 09, 2024)
An Incorrect Access Control vulnerability was found in /smsa/view_class.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view CLASS details.
0
