Qdocs Smart School Management System vulnerabilities

CVE-2024-8784 [HIGH] CWE-89 CVE-2024-8784: A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affe A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users[] with the input 1'+AND+(SELECT+3220+FROM+(SELECT(SLEEP(5)))ZNun)+AND+'WwBM'%3d'WwBM as part of POST Reque

CVE-2026-4991 [LOW] CWE-79 CVE-2026-4991: A vulnerability was detected in QDOCS Smart School Management System up to 7.2. The impacted element A vulnerability was detected in QDOCS Smart School Management System up to 7.2. The impacted element is an unknown function of the file /admin/enquiry of the component Admission Enquiry Module. Performing a manipulation of the argument Note results in cross site scripting. The attack is possible to be carried out remotely.