Complete Web Based School Management System

Vendor:

First CVE: May 6, 2024 · Active for 2 years

104
Total CVEs
More Total CVEs than 99% of tracked products
104.0
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 41% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Complete Web Based School Management System over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 6, 2024
2 years ago
Most Recent CVE
May 28, 2024
787 days ago

CVE Severity & Scoring

Complete Web Based School Management System104 CVEs
All CVEs352,231 CVEs
MediumHighCritical
Attack Vector
Local2 (1.9%)
Network102 (98.1%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low103 (99.0%)
High1 (1.0%)
Unknown0 (0.0%)
User Interaction
None59 (56.7%)
Unknown0 (0.0%)
Required45 (43.3%)
Privileges Required
Low37 (35.6%)
High0 (0.0%)
None67 (64.4%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (104 CVEs).

104 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-33799CRITICAL
A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id
May 28, 20249.829NONO
CVE-2024-34931CRITICAL
A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the
May 23, 20249.829NONO
CVE-2024-34927CRITICAL
A SQL injection vulnerability in /model/update_classroom.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via t
May 23, 20249.827NONO
CVE-2024-33808CRITICAL
A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the
May 28, 20249.826NONO
CVE-2024-33806CRITICAL
A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id p
May 28, 20249.826NONO
CVE-2024-33805CRITICAL
A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id
May 28, 20249.826NONO
CVE-2024-33801CRITICAL
A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands vi
May 28, 20249.826NONO
CVE-2024-33800CRITICAL
A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the i
May 28, 20249.826NONO
CVE-2024-34935CRITICAL
A SQL injection vulnerability in /view/conversation_history_admin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL comma
May 23, 20249.826NONO
CVE-2024-34934CRITICAL
A SQL injection vulnerability in /view/emarks_range_grade_update_form.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL c
May 23, 20249.826NONO
View all 104 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (104 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (104 CVEs).

Media Mentions

Signals from CVEs in this product scope (104 CVEs).

Top CNAs Publishing CVEs For Complete Web Based School Management System

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
1.01047.00.5%00