School Event Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:janobe:school_event_management_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Janobe (958e97e2-37fb-58eb-baa2-792f3e424acf) |
|---|---|
| Product | School Event Management System (7b1d0fb5-fdf3-5fd6-b26d-cbbac7cd8085) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-33994 |
vulnerable | 2026-06-03 14:55:53.311959 |
Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in '/event/index.php'.
Published: 2024-08-06T13:09:59.584Z
Updated: 2024-08-06T13:27:17.852Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33993 |
vulnerable | 2026-06-03 14:55:53.311643 |
Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in /candidate/index.php'.
Published: 2024-08-06T13:09:42.301Z
Updated: 2024-08-08T18:14:01.531Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33992 |
vulnerable | 2026-06-03 14:55:53.311221 |
Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/student/index.php'.
Published: 2024-08-06T13:07:18.963Z
Updated: 2024-08-08T15:47:03.101Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33991 |
vulnerable | 2026-06-03 14:55:53.310782 |
Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/eventwinner/index.php'.
Published: 2024-08-06T13:07:03.052Z
Updated: 2024-08-06T14:37:59.761Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33990 |
vulnerable | 2026-06-03 14:55:53.310456 |
Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser session via the 'id' and 'view' parameters in '/user/index.php'.
Published: 2024-08-06T13:06:27.544Z
Updated: 2024-08-06T14:34:55.136Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33989 |
vulnerable | 2026-06-03 14:55:53.310125 |
Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser session via the 'eventdate' and 'events' parameters in 'port/event_print.php'.
Published: 2024-08-06T13:06:08.419Z
Updated: 2024-08-06T13:39:11.941Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33988 |
vulnerable | 2026-06-03 14:55:53.309781 |
Cross-Site Scripting (XSS) vulnerability in Janobe products
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and 'YearLevel' parameters in '/report/attendance_print.php'.
Published: 2024-08-06T13:04:16.980Z
Updated: 2024-08-08T15:47:25.790Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33987 |
vulnerable | 2026-06-03 14:55:53.309371 |
Cross-Site Scripting (XSS) vulnerability in Janobe products
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate', 'YearLevel', 'eventdate', 'events', 'Users' and 'YearLevel' parameters in '/report/index.php'.
Published: 2024-08-06T13:03:47.450Z
Updated: 2024-08-06T14:41:02.875Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33986 |
vulnerable | 2026-06-03 14:55:53.308870 |
Cross-Site Scripting (XSS) vulnerability in Janobe products
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in '/department/index.php'.
Published: 2024-08-06T13:02:39.564Z
Updated: 2024-08-06T13:39:53.185Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33985 |
vulnerable | 2026-06-03 14:55:53.308483 |
Cross-Site Scripting (XSS) vulnerability in Janobe products
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in '/course/index.php'.
Published: 2024-08-06T13:02:22.294Z
Updated: 2024-08-06T13:23:51.512Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33984 |
vulnerable | 2026-06-03 14:55:53.308081 |
Cross-Site Scripting (XSS) vulnerability in Janobe products
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and 'YearLevel' parameters in '/AttendanceMonitoring/report/index.php'.
Published: 2024-08-06T13:02:03.154Z
Updated: 2024-08-06T13:17:50.865Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33983 |
vulnerable | 2026-06-03 14:55:53.307683 |
Cross-Site Scripting (XSS) vulnerability in Janobe products
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'Attendance', 'attenddate' and 'YearLevel' parameters in '/AttendanceMonitoring/report/attendance_print.php'.
Published: 2024-08-06T13:01:40.353Z
Updated: 2024-08-06T13:12:07.201Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33982 |
vulnerable | 2026-06-03 14:55:53.307156 |
Cross-Site Scripting (XSS) vulnerability in Janobe products
HIGH (7.1)
Cross-Site Scripting (XSS) vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'StudentID' parameter in '/AttendanceMonitoring/student/controller.php'.
Published: 2024-08-06T13:00:56.316Z
Updated: 2024-08-06T13:28:09.769Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.