CVE-2024-4646

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /view/student_payment_details.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-263490 is the identifier assigned to this vulnerability.

• CWE-79

• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2015.pdfExploit
• https://vuldb.com/?ctiid.263490Permissions Required, VDB Entry
• https://vuldb.com/?id.263490Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.330120Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2015.pdfExploit
• https://vuldb.com/?ctiid.263490Permissions Required, VDB Entry
• https://vuldb.com/?id.263490Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.330120Third Party Advisory, VDB Entry

Published

May 8, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4645A vulnerability was found in SourceCodester Prison Managemen…5.4
• CVE-2024-46450Incorrect access control in Tenda AC1200 Smart Dual-Band WiF…8.1
• CVE-2024-46451TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overf…9.8
• CVE-2024-46452A Host Header injection vulnerability in the password reset …6.1
• CVE-2024-46453A cross-site scripting (XSS) vulnerability in the component …6.1
• CVE-2024-46455unstructured v.0.14.2 and before is vulnerable to XML Extern…9.8
• CVE-2024-46461VLC media player 3.0.20 and earlier is vulnerable to denial …8
• CVE-2024-46462By default, dedicated folders of ZEDMAIL for Windows up to 2…7.8
• CVE-2024-46463By default, dedicated folders of ORIZON for Windows up to 20…7.8
• CVE-2024-46464In PRIMX ZED Enterprise up to 2024.3, technical files stored…7.8
• CVE-2024-46465By default, dedicated folders of CRYHOD for Windows up to 20…7.8
• CVE-2024-46466By default, dedicated folders of ZONECENTRAL for Windows up …7.8