CVE-2024-3530

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file Marks_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259900.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Apr 10, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-353006.1In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible CVE-2024-353015.5In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token CVE-2024-353026.1In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possible CVE-2024-353037.8A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0012), Tecnomatix Plant Simulation V2404 (All CVE-2024-353049.8System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitrary system commands.CVE-2024-353059.8Unauth Time-Based SQL Injection in API allows to exploit HTTP request Authorization header. This issue affects Pandora FMS: from 700 through CVE-2024-353069.8OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables. This issue affects Pando CVE-2024-353079.8Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary cod CVE-2024-353088.8A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. This issue affects Pand CVE-2024-35316.1A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects s CVE-2024-353113.3Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 hav CVE-2024-353126.2In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 (with lite vanguards), aka TROVE-2024-003.