PT-2025-11555

Name of the Vulnerable Software and Affected Versions code-projects Online Class and Exam Scheduling System version 1.0 Description A critical issue was found in the code-projects Online Class and Exam Scheduling System. The problem is related to an unknown function of the file /pages/salut...

CVE-2025-29426: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

CVE-2025-29427: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...

CVE-2025-29429: Improper Neutralization of Input During Web Page Generation

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/program.php via the id, code, and name parameters...

CVE-2025-29431: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/department.php via the id, code, and name parameters...

PT-2025-11537

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank Management System version 1.0 Description A critical issue affects some unknown functionality of the file /admin/add city.php, leading to sql injection. The attack may be launched remotely. Recommendations For...

CVE-2025-29430

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) within the /pages/room.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data in the id and rome parameters, which allows an attacker to inject and ex...

CVE-2025-29425

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

Code-Projects Real Estate Property Management System Security Vulnerabilities

Code-Projects Real Estate Property Management System is an open source real estate property management system from Code-Projects. The vulnerability stems from an incorrect operation of the parameters txtName/txtAddress/cmbCity/txtEmail/cmbGender/txtBirthDate/txtUserName2/txtPassword2, which can...

PT-2025-11512

Name of the Vulnerable Software and Affected Versions code-projects Real Estate Property Management System version 1.0 Description A critical issue was found in the Parameter Handler component of the file /InsertCustomer.php. The manipulation of the txtName, txtAddress, cmbCity, txtEmail,...

Code-Projects Online Exam Mastering System Security Vulnerabilities

Code-Projects Online Exam Mastering System is a Code-Projects open source online exam system. A security vulnerability exists in Code-Projects Online Exam Mastering System v1.0, which stems from an incorrect manipulation of the parameter fid that can lead to SQL injection...

CVE-2025-29426

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) in the /pages/class.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data within the id and cys parameters, allowing an attacker to inject and ex...

PT-2025-11517

Name of the Vulnerable Software and Affected Versions code-projects Modern Bag version 1.0 Description A critical issue has been discovered, affecting the /login.php file. The manipulation of the userEmail and userPassword arguments leads to SQL injection. This issue can be exploited remotely...

PT-2025-11548 · Unknown · Code-Projects Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank Management System version 1.0 Description: A critical vulnerability was found in the code-projects Blood Bank Management System. This issue affects unknown code of the file /admin/admin login.php of the component Admi...

PT-2025-11534

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/program.php endpoint via the id, code, and name parameters. This allows for potential malicious script...

PT-2025-11540

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns SQL Injection in the exam save.php file, specifically via the member and first parameters. This allows for potential manipulation of database...

PT-2025-11554

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version V1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It affects the /pages/class.php endpoint via the id and cys parameters. Recommendations For Code-projec...

PT-2025-11526

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/room.php endpoint via the id and rome parameters. This allows for potential malicious script execution...

CVE-2025-2393: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/salutdel.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...