Carmelo Agro-School Management System vulnerabilities

2 CVEs affecting Carmelo Agro-School Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-25250, published 2024-03-13.

More from Carmelo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-25251, published 2024-02-22. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. code-projects Agro-School Management System 1.0 is suffers from Incorrect Access Control.
• CVE-2024-25250, published 2024-03-13. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. SQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers to run arbitrary code via the Login page.