Code-Projects Simple School Management System
9 CVEs affecting Code-Projects Simple School Management System. Latest disclosed: 2024-04-25. Critical: 0, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-25310 | High | 8.8 | 2024-02-09 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5." |
CVE-2024-25313 | High | 8.8 | 2024-02-09 | Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacher_login.php. |
CVE-2024-25312 | High | 8.8 | 2024-02-09 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?id=5." |
CVE-2024-25309 | High | 8.8 | 2024-02-09 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.php. |
CVE-2024-25308 | High | 8.8 | 2024-02-09 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php. |
CVE-2024-25306 | High | 8.8 | 2024-02-09 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php". |
CVE-2024-25305 | High | 8.8 | 2024-02-09 | Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php. |
CVE-2024-25304 | High | 8.8 | 2024-02-09 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php." |
CVE-2024-31610 | Medium | 6.3 | 2024-04-25 | File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitra… |