CVE-2024-3533

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file academic_year_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259903.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Apr 10, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-353338.4A stack-buffer-overflow vulnerability exists in the read_charset_decl function of html2xhtml 1.3. This vulnerability occurs due to improper CVE-2024-353389.8Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root.CVE-2024-353399.8Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac.CVE-2024-35349.8A vulnerability, which was classified as critical, has been found in Campcodes Church Management System 1.0. Affected by this issue is some CVE-2024-353408.6Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeComma CVE-2024-353417.5Certain Anpviz products allow unauthenticated users to download the running configuration of the device via a HTTP GET request to /ConfigFil CVE-2024-353424.6Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volume, speaker volume, CVE-2024-353439.8Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /CVE-2024-353449.9Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D250, IPC-D260, IPC-B85 CVE-2024-353455.4A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts unidentified code within the fil CVE-2024-353499.8A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the CVE-2024-35359.8A vulnerability, which was classified as critical, was found in Campcodes Church Management System 1.0. This affects an unknown part of the