Vulnerabilities (CVE)

Filtered by vendor Lopalopa Subscribe
Total 88 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-41239 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 4.8 MEDIUM
A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "class_name" parameter field.
CVE-2024-41242 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 6.1 MEDIUM
A Reflected Cross Site Scripting (XSS) vulnerability was found in /smsa/student_login.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter.
CVE-2024-41245 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 5.3 MEDIUM
An Incorrect Access Control vulnerability was found in /smsa/view_teachers.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view TEACHER details.
CVE-2024-41244 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 5.3 MEDIUM
An Incorrect Access Control vulnerability was found in /smsa/view_class.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view CLASS details.
CVE-2024-41247 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 5.3 MEDIUM
An Incorrect Access Control vulnerability was found in /smsa/add_class.php and /smsa/add_class_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new class entry.
CVE-2024-41248 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 5.3 MEDIUM
An Incorrect Access Control vulnerability was found in /smsa/add_subject.php and /smsa/add_subject_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new subject entry.
CVE-2024-41249 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 5.3 MEDIUM
An Incorrect Access Control vulnerability was found in /smsa/view_subject.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view SUBJECT details.
CVE-2024-41252 1 Lopalopa 1 Responsive School Management System 2024-08-08 N/A 6.5 MEDIUM
An Incorrect Access Control vulnerability was found in /smsa/admin_student_register_approval.php and /smsa/admin_student_register_approval_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve student registration.