School Event Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:janobe:school_event_management_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Janobe (958e97e2-37fb-58eb-baa2-792f3e424acf) |
|---|---|
| Product | School Event Management System (7b1d0fb5-fdf3-5fd6-b26d-cbbac7cd8085) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-33994 |
vulnerable | 2026-06-08 06:37:32.449689 |
Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in '/event/index.php'.
Published: 2024-08-06T13:09:59.584Z
Updated: 2024-08-06T13:27:17.852Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33993 |
vulnerable | 2026-06-08 06:37:32.449236 |
Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in /candidate/index.php'.
Published: 2024-08-06T13:09:42.301Z
Updated: 2024-08-08T18:14:01.531Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33992 |
vulnerable | 2026-06-08 06:37:32.448883 |
Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/student/index.php'.
Published: 2024-08-06T13:07:18.963Z
Updated: 2024-08-08T15:47:03.101Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33991 |
vulnerable | 2026-06-08 06:37:32.448345 |
Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/eventwinner/index.php'.
Published: 2024-08-06T13:07:03.052Z
Updated: 2024-08-06T14:37:59.761Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33990 |
vulnerable | 2026-06-08 06:37:32.447828 |
Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser session via the 'id' and 'view' parameters in '/user/index.php'.
Published: 2024-08-06T13:06:27.544Z
Updated: 2024-08-06T14:34:55.136Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33989 |
vulnerable | 2026-06-08 06:37:32.447362 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33988 |
vulnerable | 2026-06-08 06:37:32.446994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33987 |
vulnerable | 2026-06-08 06:37:32.446440 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33986 |
vulnerable | 2026-06-08 06:37:32.445764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33985 |
vulnerable | 2026-06-08 06:37:32.445321 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33984 |
vulnerable | 2026-06-08 06:37:32.444680 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33983 |
vulnerable | 2026-06-08 06:37:32.444091 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33982 |
vulnerable | 2026-06-08 06:37:32.443399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.