Arajajyothibabu School Management System — known CVE vulnerabilities

Every CVE whose affected-product data names Arajajyothibabu School Management System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2024-42566 — CVSS 9.8 (critical): School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php
• CVE-2024-42567 — CVSS 9.8 (critical): School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at…
• CVE-2024-42568 — CVSS 9.8 (critical): School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php.
• CVE-2024-42569 — CVSS 9.8 (critical): School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php.
• CVE-2024-42570 — CVSS 9.8 (critical): School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at admininsert.php.
• CVE-2024-42571 — CVSS 9.8 (critical): School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at…
• CVE-2024-42572 — CVSS 9.8 (critical): School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php.
• CVE-2024-42573 — CVSS 9.8 (critical): School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php.
• CVE-2024-42574 — CVSS 9.8 (critical): School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php.
• CVE-2024-42575 — CVSS 9.8 (critical): School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php.