https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-41236.htmlhttps://patchthecve.com/cve/CVE-2024-41236.htmlWed, 17 Jun 2026 07:47:27 +0000HIGH 7.2: A SQL injection vulnerability in /smsa/admin_login.php in Kashipara Responsive School Management System v3.2.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter of the Admin Login Pagehttps://patchthecve.com/cve/CVE-2024-41238.htmlhttps://patchthecve.com/cve/CVE-2024-41238.htmlWed, 17 Jun 2026 07:47:28 +0000MEDIUM 5.3: A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter.https://patchthecve.com/cve/CVE-2024-41239.htmlhttps://patchthecve.com/cve/CVE-2024-41239.htmlWed, 17 Jun 2026 07:47:28 +0000MEDIUM 4.8: A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "class_name" parameter field.https://patchthecve.com/cve/CVE-2024-41237.htmlhttps://patchthecve.com/cve/CVE-2024-41237.htmlWed, 17 Jun 2026 07:47:27 +0000CRITICAL 9.8: A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter.https://patchthecve.com/cve/CVE-2024-41242.htmlhttps://patchthecve.com/cve/CVE-2024-41242.htmlWed, 17 Jun 2026 07:47:28 +0000MEDIUM 6.1: A Reflected Cross Site Scripting (XSS) vulnerability was found in /smsa/student_login.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter.https://patchthecve.com/cve/CVE-2024-41241.htmlhttps://patchthecve.com/cve/CVE-2024-41241.htmlWed, 17 Jun 2026 07:47:28 +0000MEDIUM 6.1: A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/admin_login.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter.https://patchthecve.com/cve/CVE-2024-41240.htmlhttps://patchthecve.com/cve/CVE-2024-41240.htmlWed, 17 Jun 2026 07:47:28 +0000MEDIUM 6.1: A Reflected Cross Site Scripting (XSS) vulnerability was found in " /smsa/teacher_login.php" in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via the "error" parameter.https://patchthecve.com/cve/CVE-2024-41250.htmlhttps://patchthecve.com/cve/CVE-2024-41250.htmlWed, 17 Jun 2026 07:47:30 +0000MEDIUM 5.3: An Incorrect Access Control vulnerability was found in /smsa/view_students.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view STUDENT details.https://patchthecve.com/cve/CVE-2024-41245.htmlhttps://patchthecve.com/cve/CVE-2024-41245.htmlWed, 17 Jun 2026 07:47:29 +0000MEDIUM 5.3: An Incorrect Access Control vulnerability was found in /smsa/view_teachers.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view TEACHER details.https://patchthecve.com/cve/CVE-2024-41244.htmlhttps://patchthecve.com/cve/CVE-2024-41244.htmlWed, 17 Jun 2026 07:47:29 +0000MEDIUM 5.3: An Incorrect Access Control vulnerability was found in /smsa/view_class.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view CLASS details.https://patchthecve.com/cve/CVE-2024-41243.htmlhttps://patchthecve.com/cve/CVE-2024-41243.htmlWed, 17 Jun 2026 07:47:28 +0000MEDIUM 5.3: An Incorrect Access Control vulnerability was found in /smsa/view_marks.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view MARKS details.https://patchthecve.com/cve/CVE-2024-41252.htmlhttps://patchthecve.com/cve/CVE-2024-41252.htmlWed, 17 Jun 2026 07:47:30 +0000MEDIUM 6.5: An Incorrect Access Control vulnerability was found in /smsa/admin_student_register_approval.php and /smsa/admin_student_register_approval_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve student registration.https://patchthecve.com/cve/CVE-2024-41251.htmlhttps://patchthecve.com/cve/CVE-2024-41251.htmlWed, 17 Jun 2026 07:47:30 +0000MEDIUM 6.5: An Incorrect Access Control vulnerability was found in /smsa/admin_teacher_register_approval.php and /smsa/admin_teacher_register_approval_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve Teacher registration.https://patchthecve.com/cve/CVE-2024-41249.htmlhttps://patchthecve.com/cve/CVE-2024-41249.htmlWed, 17 Jun 2026 07:47:29 +0000MEDIUM 5.3: An Incorrect Access Control vulnerability was found in /smsa/view_subject.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view SUBJECT details.https://patchthecve.com/cve/CVE-2024-41248.htmlhttps://patchthecve.com/cve/CVE-2024-41248.htmlWed, 17 Jun 2026 07:47:29 +0000MEDIUM 5.3: An Incorrect Access Control vulnerability was found in /smsa/add_subject.php and /smsa/add_subject_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new subject entry.https://patchthecve.com/cve/CVE-2024-41247.htmlhttps://patchthecve.com/cve/CVE-2024-41247.htmlWed, 17 Jun 2026 07:47:29 +0000MEDIUM 5.3: An Incorrect Access Control vulnerability was found in /smsa/add_class.php and /smsa/add_class_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to add a new class entry.https://patchthecve.com/cve/CVE-2024-41246.htmlhttps://patchthecve.com/cve/CVE-2024-41246.htmlWed, 17 Jun 2026 07:47:29 +0000MEDIUM 5.3: An Incorrect Access Control vulnerability was found in /smsa/admin_dashboard.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view administrator dashboard.