# CVEs published 2024-05-12

18 CVEs were published on May 12, 2024: 0 critical, 2 high. Days are UTC.

- [CVE-2024-4807](https://cve.now/CVE-2024-4807.md): Kashipara College Management System delete\_user.php sql injection (CVSS 5.3, Kashipara College Management System)
- [CVE-2024-4806](https://cve.now/CVE-2024-4806.md): Kashipara College Management System each\_extracurricula\_activities.php sql injection (CVSS 5.3, Kashipara College Management System)
- [CVE-2024-4805](https://cve.now/CVE-2024-4805.md): Kashipara College Management System edit\_faculty.php sql injection (CVSS 5.3, Kashipara College Management System)
- [CVE-2024-4804](https://cve.now/CVE-2024-4804.md): Kashipara College Management System edit\_user.php sql injection (CVSS 5.3, Kashipara College Management System)
- [CVE-2024-4803](https://cve.now/CVE-2024-4803.md): Kashipara College Management System submit\_admin.php sql injection (CVSS 5.3, Kashipara College Management System)
- [CVE-2024-4802](https://cve.now/CVE-2024-4802.md): Kashipara College Management System submit\_extracurricular\_activity.php sql injection (CVSS 5.3, Kashipara College Management System)
- [CVE-2024-4801](https://cve.now/CVE-2024-4801.md): Kashipara College Management System submit\_new\_faculty.php sql injection (CVSS 5.3, Kashipara College Management System)
- [CVE-2024-4800](https://cve.now/CVE-2024-4800.md): Kashipara College Management System submit\_student.php sql injection (CVSS 5.3, Kashipara College Management System)
- [CVE-2024-2299](https://cve.now/CVE-2024-2299.md): Stored Cross-Site Scripting (XSS) via Profile Picture Upload in parisneo/lollms-webui (CVSS 7.4, parisneo/lollms-webui)
- [CVE-2024-4799](https://cve.now/CVE-2024-4799.md): Kashipara College Management System view\_each\_faculty.php sql injection (CVSS 5.3, Kashipara College Management System)
- [CVE-2024-4798](https://cve.now/CVE-2024-4798.md): SourceCodester Online Computer and Laptop Store manage\_brand.php sql injection (CVSS 5.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2024-4797](https://cve.now/CVE-2024-4797.md): Campcodes Online Laundry Management System ajax.php cross site scripting (CVSS 5.3, Campcodes Online Laundry Management System)
- [CVE-2024-4796](https://cve.now/CVE-2024-4796.md): Campcodes Online Laundry Management System manage\_inv.php sql injection (CVSS 5.3, Campcodes Online Laundry Management System)
- [CVE-2024-4795](https://cve.now/CVE-2024-4795.md): Campcodes Online Laundry Management System manage\_user.php sql injection (CVSS 5.3, Campcodes Online Laundry Management System)
- [CVE-2024-4794](https://cve.now/CVE-2024-4794.md): Campcodes Online Laundry Management System manage\_receiving.php sql injection (CVSS 5.3, Campcodes Online Laundry Management System)
- [CVE-2024-4793](https://cve.now/CVE-2024-4793.md): Campcodes Online Laundry Management System manage\_laundry.php sql injection (CVSS 5.3, Campcodes Online Laundry Management System)
- [CVE-2024-4792](https://cve.now/CVE-2024-4792.md): Campcodes Online Laundry Management System admin\_class.php sql injection (CVSS 5.3, Campcodes Online Laundry Management System)
- [CVE-2024-4791](https://cve.now/CVE-2024-4791.md): Contemporary Control System BASrouter BACnet BASRT-B Application Protocol Data Unit denial of service (CVSS 8.7, Contemporary Control System BASrouter BACnet BASRT-B)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-05-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.