Simple School Management System (Code-projects) - vulnerabilities (CVEs)

10 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-04-25. Vendor: Code-projects.

CVEs of Simple School Management System

• CVE-2024-31610 - CVSS 6.3 (medium), 2024-04-25: File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run…
• CVE-2024-31609 - CVSS 7.1 (high), 2024-04-25: Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code…
• CVE-2024-25310 - CVSS 8.8 (high), 2024-02-09: Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."
• CVE-2024-25308 - CVSS 8.8 (high), 2024-02-09: Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php.
• CVE-2024-25313 - CVSS 8.8 (high), 2024-02-09: Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacher_login.php.
• CVE-2024-25306 - CVSS 8.8 (high), 2024-02-09: Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php".
• CVE-2024-25312 - CVSS 8.8 (high), 2024-02-09: Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?id=5."
• CVE-2024-25309 - CVSS 8.8 (high), 2024-02-09: Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.php.
• CVE-2024-25304 - CVSS 8.8 (high), 2024-02-09: Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."
• CVE-2024-25305 - CVSS 8.8 (high), 2024-02-09: Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php.