CVE-2024-12489

CVE-2024-12489 affects code-projects Online Class and Exam Scheduling System 1.0, specifically the /pages/term.php file where the id parameter enables SQL injection. The vulnerability allows remote initiation of an attack and is supported by multiple sources in connected documents. Root cause: la...

CVE-2024-12488

Code-Projects Online Class and Exam Scheduling System 1.0 is affected by a SQL injection in the /pages/subject_update.php file via the id parameter. The vulnerability, described across multiple sources (NVD, CVE records, CNVD, Red Hat, CNVD mirrors), indicates remote exploitation with publicly di...

CVE-2024-12488 code-projects Online Class and Exam Scheduling System subject_update.php sql injection

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subjectupdate.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2024-12488 code-projects Online Class and Exam Scheduling System subject_update.php sql injection

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subjectupdate.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2024-12487 code-projects Online Class and Exam Scheduling System room_update.php sql injection

A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/roomupdate.php. The manipulation of the argument id leads to sql injection. The attack can be...

CVE-2024-12487

The CVE-2024-12487 entry affects Code-Projects’ Online Class and Exam Scheduling System 1.0, via /pages/room_update.php where the id parameter can be manipulated to trigger SQL injection. This is a network-accessible vulnerability with a high impact vector (CONFIDENTIALITY, INTEGRITY, AVAILABILIT...

CVE-2024-12487 code-projects Online Class and Exam Scheduling System room_update.php sql injection

A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/roomupdate.php. The manipulation of the argument id leads to sql injection. The attack can be...

CVE-2024-12486 code-projects Online Class and Exam Scheduling System rank_update.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/rankupdate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. T...

CVE-2024-12486

CVE-2024-12486 affects Code-Projects Online Class and Exam Scheduling System 1.0. The vulnerability is in the file /pages/rank_update.php where the parameter id is not properly validated, leading to a SQL injection. The flaw is exploitable remotely, and an exploit has been disclosed publicly. The...

CVE-2024-12485 code-projects Online Class and Exam Scheduling System department.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...

CVE-2024-12485 code-projects Online Class and Exam Scheduling System department.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...

PT-2024-17619 · Unknown · Code-Projects Online Class/Exam Scheduling System

Name of the Vulnerable Software and Affected Versions: code-projects Online Class and Exam Scheduling System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /pages/rank update.php. The manipulation of the id argument leads to SQL...

PT-2024-17624 · Unknown · Code-Projects Online Class/Exam Scheduling System

Name of the Vulnerable Software and Affected Versions: code-projects Online Class and Exam Scheduling System version 1.0 Description: A critical issue has been found in the code-projects Online Class and Exam Scheduling System. This issue affects unknown code in the file /pages/teacher save.php...

PT-2024-9563 · Unknown · Simplexlsx

Name of the Vulnerable Software and Affected Versions: SimpleXLSX class affected versions not specified Description: The issue is related to a lack of sanitization in the SimpleXLSX class for reading files. This could allow a remote attacker to execute arbitrary code. Recommendations: At the...

PT-2024-17618

Name of the Vulnerable Software and Affected Versions code-projects Online Class and Exam Scheduling System version 1.0 Description A critical issue has been found in the processing of the file /pages/department.php, where the manipulation of the id argument leads to SQL injection. The attack can...

PT-2024-17620

Name of the Vulnerable Software and Affected Versions code-projects Online Class and Exam Scheduling System version 1.0 Description A critical issue has been found in the system, affecting an unknown functionality of the file /pages/room update.php. The manipulation of the id argument leads to SQ...

Drupal core contains a potential PHP Object Injection vulnerability

Drupal core contains a potential PHP Object Injection vulnerability that if combined with another exploit could lead to Remote Code Execution. It is not directly exploitable. This issue is mitigated by the fact that in order for it to be exploitable, a separate vulnerability must be present to...

CVE-2024-11868: Improper Access Control

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.7.3 via class-lp-rest-material-controller.php. This makes it possible for unauthenticated attackers to extract potentially sensitive paid course...

CVE-2024-54934

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deleteclass.php...

CVE-2024-54921

A SQL Injection was found in /studentsignup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username, firstname, lastname, and classid parameters...