CVE-2024-4683

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /view/exam_timetable_insert_form.php. The manipulation of the argument exam leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263624.
Configurations

Configuration 1 (hide)

cpe:2.3:a:campcodes:complete_web-based_school_management_system:1.0:*:*:*:*:*:*:*

History

19 Feb 2025, 18:37

Type Values Removed Values Added
References () https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2030.pdf - () https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2030.pdf - Exploit
References () https://vuldb.com/?ctiid.263624 - () https://vuldb.com/?ctiid.263624 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.263624 - () https://vuldb.com/?id.263624 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.331773 - () https://vuldb.com/?submit.331773 - Third Party Advisory, VDB Entry
CPE cpe:2.3:a:campcodes:complete_web-based_school_management_system:1.0:*:*:*:*:*:*:*
First Time Campcodes
Campcodes complete Web-based School Management System

21 Nov 2024, 09:43

Type Values Removed Values Added
References () https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2030.pdf - () https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2030.pdf -
References () https://vuldb.com/?ctiid.263624 - () https://vuldb.com/?ctiid.263624 -
References () https://vuldb.com/?id.263624 - () https://vuldb.com/?id.263624 -
References () https://vuldb.com/?submit.331773 - () https://vuldb.com/?submit.331773 -

17 May 2024, 02:40

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-14 15:44

Updated : 2025-02-19 18:37


NVD link : CVE-2024-4683

Mitre link : CVE-2024-4683

CVE.ORG link : CVE-2024-4683


JSON object : View

Products Affected

campcodes

  • complete_web-based_school_management_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')