Web School Enterprise Resource Planning (Web School ERP) 5.0
Approved changes feed: RSS · Atom
cpe:2.3:a:web-school:enterprise_resource_planning:5.0:*:*:*:*:*:*:*part: a version: 5.0 update: *
| Vendor | Web School (966ef64a-4ffd-57a0-a068-415736f133a4) |
|---|---|
| Product | Enterprise Resource Planning (648b8c74-35ea-54b7-9092-3c03d84b372a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-30114 |
vulnerable | 2026-06-08 05:31:46.902619 |
Details available
Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create a voucher payment request through module/accounting/voucher/create. The application fails to validate the CSRF token for a POST request using admin privilege.
Published: 2021-04-08T11:09:50.000Z
Updated: 2024-08-03T22:24:59.404Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30113 |
vulnerable | 2026-06-08 05:31:46.902297 |
Details available
A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields. An attacker can inject a JavaScript code that will be stored in the page. If any visitor sees the event, then the payload will be executed and sends the victim's information to the attacker website.
Published: 2021-04-08T11:12:20.000Z
Updated: 2024-08-03T22:24:59.370Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30112 |
vulnerable | 2026-06-08 05:31:46.901959 |
Details available
Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create a student_leave_application request through module/core/studentleaveapplication/create. The application fails to validate the CSRF token for a POST request using Guardian privilege.
Published: 2021-04-08T11:13:53.000Z
Updated: 2024-08-03T22:24:59.486Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30111 |
vulnerable | 2026-06-08 05:31:46.901432 |
Details available
A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields. An attack can inject a JavaScript code that will be stored in the page. If any visitor sees the events, then the payload will be executed.
Published: 2021-04-08T11:16:36.000Z
Updated: 2024-08-03T22:24:59.625Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.