CVE-2024-4714

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /model/update_subject.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263792.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-471405.4A cross-site scripting (xss) vulnerability exists in the add_alert_check page of Observium CE 24.4.13528. A specially crafted HTTP request c CVE-2024-471415.5In the Linux kernel, the following vulnerability has been resolved: pinmux: Use sequential access to access desc->pinmux data When two cli CVE-2024-471425.5AIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and IXG-2C7-L firmware Ver.2.03 and earlier contain an issue with insufficiently pr CVE-2024-471435.5In the Linux kernel, the following vulnerability has been resolved: dma-debug: fix a possible deadlock on radix_lock radix_lock() shouldn'CVE-2024-471454.3Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which CVE-2024-471466.5Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically a CVE-2024-471485.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service excepti CVE-2024-471495.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service excepti CVE-2024-47156.1A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects a CVE-2024-471505.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471517.8Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution CVE-2024-471535.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.