school_management_system vulnerabilities

2 known vulnerabilities in school_management_system from School Management System Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  School Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-6278Jun 24, 2024Lahirudanushka

  A vulnerability has been found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file subject.php of the component Subject Page. The manipulation of the argument

• 8.3 High severity

  school_management_system: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-33404May 6, 2024School Management System Project

  A SQL injection vulnerability in /model/add_student_first_payment.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the index parameter.