Lucene search
+L

7 matches found

CVE
CVE
•added 2026/07/19 9:15 a.m.•26 views

CVE-2026-16227

SourceCodester Class and Exam Timetabling System 1.0 contains a SQL injection flaw in edit_subject.php caused by manipulating the ID parameter. The vulnerability is exploitable remotely and has publicly disclosed exploits. Affected component is the edit_subject.php function handling subject edits...

7.5CVSS7.1AI score0.00431EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/19 12:00 a.m.•2 views

CVE-2026-16227: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /editsubject.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

7.5CVSS5.5AI score0.00431EPSS
SaveExploits0References3
CVE
CVE
•added 2025/09/22 5:32 a.m.•34 views

CVE-2025-10784

The CVE-2025-10784 affects Campcodes Online Learning Management System (version 1.0). Affects the /admin/edit_subject.php functionality where manipulating the subject_code parameter leads to SQL injection. The vulnerability is remotely exploitable and the exploit has been publicly disclosed. Conn...

9.8CVSS7.3AI score0.00548EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•0 views

CVE-2025-10784: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/editsubject.php. The manipulation of the argument subjectcode leads to sql injection. It is possible to initiate the attack...

9.8CVSS5.6AI score0.00548EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:31 a.m.•14 views

CVE-2024-50829

A SQL Injection vulnerability was found in /admin/editsubject.php in kashipara E-learning Management System Project 1.0 via the unit parameter...

7.2CVSS8.2AI score0.00384EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/14 12:00 a.m.•0 views

CVE-2024-50829: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/editsubject.php in kashipara E-learning Management System Project 1.0 via the unit parameter...

7.2CVSS5.8AI score0.00384EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/20 12:00 a.m.•2 views

CVE-2023-2823: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Class Scheduling System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/editsubject.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS5.5AI score0.00754EPSS
SaveExploits1References2
Rows per page
Query Builder