CVE-2024-3531

A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file courses_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259901 was assigned to this vulnerability.

• CWE-79

• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Student%20Management%20System/Complete%20Online%20Student%20Management%20System%20-%20vuln%204.pdfExploit
• https://vuldb.com/?ctiid.259901Permissions Required, VDB Entry
• https://vuldb.com/?id.259901Permissions Required, VDB Entry
• https://vuldb.com/?submit.312522Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Student%20Management%20System/Complete%20Online%20Student%20Management%20System%20-%20vuln%204.pdfExploit
• https://vuldb.com/?ctiid.259901Permissions Required, VDB Entry
• https://vuldb.com/?id.259901Permissions Required, VDB Entry
• https://vuldb.com/?submit.312522Third Party Advisory, VDB Entry

Published

Apr 10, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-35303A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2024-35304System command injection through Netflow function due to imp…9.8
• CVE-2024-35305Unauth Time-Based SQL Injection in API allows to exploit HTT…9.8
• CVE-2024-35306OS Command injection in Ajax PHP files via HTTP Request, all…9.8
• CVE-2024-35307Argument Injection Leading to Remote Code Execution in Realt…9.8
• CVE-2024-35308A post-authentication arbitrary file read vulnerability with…8.8
• CVE-2024-35311Yubico YubiKey 5 Series before 5.7.0, Security Key Series be…3.3
• CVE-2024-35312In Tor Arti before 1.2.3, STUB circuits incorrectly have a l…6.2
• CVE-2024-35313In Tor Arti before 1.2.3, circuits sometimes incorrectly hav…7.3
• CVE-2024-35314A vulnerability in the Desktop Client of Mitel MiCollab thro…9.8
• CVE-2024-35315A vulnerability in the Desktop Client of Mitel MiCollab thro…5.6
• CVE-2024-3532A vulnerability classified as problematic has been found in …6.1