Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8
CVE-2024-4824
- EPSS 1.84%
- Veröffentlicht 14.05.2024 15:45:15
- Zuletzt bearbeitet 23.10.2025 12:27:05
Vulnerability in School ERP Pro+Responsive 1.0 that allows SQL injection through the '/SchoolERP/office_admin/' index in the parameters groups_id, examname, classes_id, es_voucherid, es_class, etc. This vulnerability could allow a remote attacker to ...
6.1
CVE-2024-4823
- EPSS 0.35%
- Veröffentlicht 14.05.2024 15:45:14
- Zuletzt bearbeitet 23.10.2025 12:27:00
Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/office_admin/' in the parameters es_bankacc, es_bank_name, es_bank_pin, es_checkno, es_teller_number, dc1 and dc2. An attacker could send a specially crafted Jav...
6.1
CVE-2024-4822
- EPSS 0.17%
- Veröffentlicht 14.05.2024 15:45:13
- Zuletzt bearbeitet 23.10.2025 12:26:55
Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session.
1