Ssl_Seven_Security Lab_Wangzhiqiang_Xiaozilong

A problematic issue was found in the system, affecting some unknown functionality of the file view each faculty.php. The manipulation of the `id` argument leads to cross-site scripting. The attack can be launched remotely.

A problematic issue has been found in the system, affecting an unknown function of the file delete faculty.php. The manipulation of the `id` argument leads to cross-site scripting. It is possible to launch the attack remotely.

A problematic issue was found in the processing of the file each extracurricula activities.php. The manipulation of the `id` argument leads to cross site scripting. The attack may be initiated remotely.

A problematic issue has been found in the system, affecting the processing of the file submit login.php. The manipulation of the `usertype` argument leads to cross-site scripting. The attack can be initiated remotely.

A problematic issue was found in the system, affecting an unknown function of the file submit new faculty.php. The manipulation of the `address` argument leads to cross site scripting. It is possible to launch the attack remotely.

A problematic issue has been discovered, affecting some unknown functionality of the file submit enroll staff.php. The manipulation of the `class name` argument leads to cross-site scripting. The attack can be launched remotely.

A vulnerability was found in the Kashipara College Management System, affecting an unknown functionality of the file submit admin.php. The manipulation of the `admin name` argument leads to cross-site scripting. The attack can be launched remotely.

A vulnerability has been found in the file submit student.php, where the manipulation of the `address` argument leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

A problematic issue has been found in the file submit enroll student.php, where the manipulation of the `class name` argument leads to cross-site scripting. This issue can be initiated remotely.

A problematic issue was found in the submit extracurricular activity.php file, where the manipulation of the `activity contact` argument leads to cross-site scripting. The attack can be initiated remotely.

A critical issue has been found in the system, affecting some unknown functionality of the file /view/timetable grade wise.php. The manipulation of the `grade` argument leads to SQL injection. The attack can be launched remotely.

A critical issue affects the processing of the file /view/unread msg.php, where the manipulation of the `my index` argument leads to SQL injection. This issue can be exploited remotely.

A critical issue has been found in the system, affecting the file /view/timetable update form.php. The manipulation of the `grade` argument leads to SQL injection. The attack can be initiated remotely. There have been reports of activities targeting this system.

A critical issue has been found in the system, affecting the file /view/teacher salary details3.php. The manipulation of the `index` argument leads to SQL injection. The attack can be initiated remotely.

A critical issue was found in the system, affecting the file /view/timetable insert form.php. The manipulation of the `grade` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

A critical issue has been found in the system, affecting an unknown function of the file /view/teacher salary invoice.php. The manipulation of the `teacher id` argument leads to SQL injection. It is possible to launch the attack remotely.

A critical issue was found in the file /view/teacher salary invoice1.php, where the manipulation of the `date` argument leads to SQL injection. The attack can be launched remotely.

A critical issue affects some unknown functionality of the file /view/teacher salary details.php, where the manipulation of the `index` argument leads to SQL injection. The attack can be launched remotely.

A critical issue has been found in the system, affecting an unknown part of the file /view/teacher salary details2.php. The manipulation of the `index` argument leads to SQL injection. It is possible to initiate the attack remotely.

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /view/student payment details4.php. The manipulation of the `index` argument leads to SQL injection. It is possible to launch the attack remotely. Recommendations: For Campcodes Complete Web-Based School Management System version 1.0, consider disabling access to the /view/student payment details4.php file until a patch is available. Restrict the manipulation of the `index` argument to minimize the risk of SQL injection exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.