GCVE - cpe:2.3:a:campcodes:school_management

Approved changes feed: RSS · Atom

cpe:2.3:a:campcodes:school_management_software:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Campcodes (`0cbc38b8-6075-5b10-9920-3b1d3efa5f42`)
Product	School Management Software (`b9c77b29-cb93-535d-971d-c69881e9f049`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-1159`	vulnerable	2026-06-08 07:06:37.054626	CampCodes School Management Software academic-calendar cross site scripting LOW (3.5) A vulnerability was found in CampCodes School Management Software 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academic-calendar. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-02-10T22:00:10.406Z Updated: 2025-02-11T15:28:53.673Z Open on db.gcve.eu Reference links https://vuldb.com/?id.295063 https://vuldb.com/?ctiid.295063 https://vuldb.com/?submit.493687 https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Stored%20Cross%20Site%20Scripting-%20Teachers%20Account%20Takeover%20Possibility.pdf https://www.campcodes.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0849`	vulnerable	2026-06-08 07:02:25.697281	CampCodes School Management Software Staff edit-staff improper authorization MEDIUM (6.3) A vulnerability classified as critical has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /edit-staff/ of the component Staff Handler. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-01-30T01:31:06.118Z Updated: 2025-01-30T15:12:09.639Z Open on db.gcve.eu Reference links https://vuldb.com/?id.294012 https://vuldb.com/?ctiid.294012 https://vuldb.com/?submit.487618 https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Sensitive%20Super%20Admin%20Data%20Exposure%20and%20Unauthorized%20Data%20Update%20via%20IDOR%20(Teacher%20Role%20to%20Super%20Admin%20Role).pdf https://www.campcodes.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0710`	vulnerable	2026-06-08 07:02:25.230075	CampCodes School Management Software Notice Board Page notice-list cross site scripting LOW (3.5) A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-01-24T21:00:21.431Z Updated: 2025-02-12T20:41:31.557Z Open on db.gcve.eu Reference links https://vuldb.com/?id.293238 https://vuldb.com/?ctiid.293238 https://vuldb.com/?submit.484934 https://github.com/anamika126/Stackofvulnerabilities/blob/main/Stored%20Cross%20Site%20Scripting%20-%20Notice%20Board.pdf https://www.campcodes.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0625`	vulnerable	2026-06-08 07:02:24.967380	CampCodes School Management Software Attachment resource injection LOW (3.1) A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. This affects an unknown part of the component Attachment Handler. The manipulation leads to improper control of resource identifiers. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Published: 2025-01-22T00:31:05.739Z Updated: 2025-01-22T18:31:40.025Z Open on db.gcve.eu Reference links https://vuldb.com/?id.292737 https://vuldb.com/?ctiid.292737 https://vuldb.com/?submit.484917 https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Insecure%20Direct%20Object%20Reference%20(IDOR)%20-%20All%20Student%20Homework%20Downloadable.pdf https://www.campcodes.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0581`	vulnerable	2026-06-08 07:02:24.888253	CampCodes School Management Software Chat History send cross site scripting LOW (3.5) A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. This affects an unknown part of the file /chat/group/send of the component Chat History. The manipulation of the argument message leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-01-20T03:00:11.375Z Updated: 2025-01-21T20:16:36.025Z Open on db.gcve.eu Reference links https://vuldb.com/?id.292599 https://vuldb.com/?ctiid.292599 https://vuldb.com/?submit.484895 https://github.com/KhukuriRimal/Vulnerabilities/blob/main/CampCodes%20-%20Stored%20Cross%20Site%20Scripting-%20Account%20Takeover%20Possibility.pdf https://www.campcodes.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0560`	vulnerable	2026-06-08 07:02:24.847201	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0559`	vulnerable	2026-06-08 07:02:24.845653	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

School Management Software

PURL mappings

Vulnerability references

Contribute