Code-Projects Simple School Management System vulnerabilities

9 CVEs affecting Code-Projects Simple School Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-31610, published 2024-04-25.

More from Code-Projects.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-25305, published 2024-02-09. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php.
• CVE-2024-25313, published 2024-02-09. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacher_login.php.
• CVE-2024-25310, published 2024-02-09. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."
• CVE-2024-25308, published 2024-02-09. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php.
• CVE-2024-25306, published 2024-02-09. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php".
• CVE-2024-25312, published 2024-02-09. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?id=5."
• CVE-2024-25309, published 2024-02-09. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.php.
• CVE-2024-25304, published 2024-02-09. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."
• CVE-2024-31610, published 2024-04-25. Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days. File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file.