CVE-2024-4652

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/show_teacher2.php. The manipulation of the argument month leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263496.

• CWE-79

• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2021.pdfExploit
• https://vuldb.com/?ctiid.263496Permissions Required, VDB Entry
• https://vuldb.com/?id.263496Permissions Required, VDB Entry
• https://vuldb.com/?submit.330126Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2021.pdfExploit
• https://vuldb.com/?ctiid.263496Permissions Required, VDB Entry
• https://vuldb.com/?id.263496Permissions Required, VDB Entry
• https://vuldb.com/?submit.330126Third Party Advisory, VDB Entry

Published

May 8, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-46506NetAlertX 23.01.14 through 24.x before 24.10.12 allows unaut…10
• CVE-2024-46507A SSTI (server side template injection) vulnerability in the…7.3
• CVE-2024-46508yeti-platform yeti before 2.1.12 allows attackers to generat…7.5
• CVE-2024-4651A vulnerability, which was classified as problematic, has be…6.1
• CVE-2024-46510ESAFENET CDG v5 was discovered to contain a SQL injection vu…7.6
• CVE-2024-46511LoadZilla LLC LoadLogic v1.4.3 was discovered to contain ins…7.5
• CVE-2024-46528An Insecure Direct Object Reference (IDOR) vulnerability in …4.3
• CVE-2024-4653A vulnerability was found in BlueNet Technology Clinical Bro…7.5
• CVE-2024-46531phpgurukul Vehicle Record Management System v1.0 was discove…6.3
• CVE-2024-46532SQL Injection vulnerability in OpenHIS v.1.0 allows an attac…9.8
• CVE-2024-46535Jepaas v7.2.8 was discovered to contain a SQL injection vuln…9.8
• CVE-2024-46538A cross-site scripting (XSS) vulnerability in pfsense v2.5.2…4.8