CVE-2024-4715

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /model/update_grade.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263793 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-471505.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471517.8Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution CVE-2024-471535.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471545.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471555.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471565.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471575.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service excepti CVE-2024-471585.4N-LINE 2.0.6 and prior versions contain a code injection vulnerability. If this vulnerability is exploited, arbitrary code may be executed o CVE-2024-471594.3In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project CVE-2024-47166.1A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerabilit CVE-2024-471605.3In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible CVE-2024-471616.5In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API