7 matches found
CVE-2026-16227
SourceCodester Class and Exam Timetabling System 1.0 contains a SQL injection flaw in edit_subject.php caused by manipulating the ID parameter. The vulnerability is exploitable remotely and has publicly disclosed exploits. Affected component is the edit_subject.php function handling subject edits...
CVE-2026-16227: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /editsubject.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...
CVE-2025-10784
The CVE-2025-10784 affects Campcodes Online Learning Management System (version 1.0). Affects the /admin/edit_subject.php functionality where manipulating the subject_code parameter leads to SQL injection. The vulnerability is remotely exploitable and the exploit has been publicly disclosed. Conn...
CVE-2025-10784: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/editsubject.php. The manipulation of the argument subjectcode leads to sql injection. It is possible to initiate the attack...
CVE-2024-50829
A SQL Injection vulnerability was found in /admin/editsubject.php in kashipara E-learning Management System Project 1.0 via the unit parameter...
CVE-2024-50829: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/editsubject.php in kashipara E-learning Management System Project 1.0 via the unit parameter...
CVE-2023-2823: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Class Scheduling System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/editsubject.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...