CVE-2025-70147: Missing Authentication for Critical Function

Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information including plaintext password field values via direct HTTP GET requests to these endpoints without a valid session...

PT-2022-21313

Name of the Vulnerable Software and Affected Versions College Management System version 1.0 Description The College Management System contains a remote code execution RCE issue that can be exploited via a crafted PHP file. The vulnerability is specifically found in the /College/admin/teacher.php...

CVE-2022-32420: Undefined Security Weakness

College Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file...