CVE-2025-6304: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /cart.php. The manipulation of the argument qty leads to sql injection. The attack may be launched remotely. The exploit has been disclosed...

CVE-2025-46173: Improper Neutralization of Input During Web Page Generation

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS via the name field in the feedback form...

CVE-2025-4244: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Online Bus Reservation System 1.0. This affects an unknown part of the file /seatlocation.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-44134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

CVE-2025-44135: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profileupdate.php. Manipulating the parameter username will cause SQL injection attacks...

CVE-2025-28121: Improper Neutralization of Input During Web Page Generation

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

CVE-2025-29430

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/room.php via the id and rome parameters...

CVE-2025-29429

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/program.php via the id, code, and name parameters...

PT-2025-11534

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/program.php endpoint via the id, code, and name parameters. This allows for potential malicious script...

PT-2025-11521

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/department.php endpoint via the id, code, and name parameters. This allows for potential malicious script...

PT-2025-11554

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version V1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It affects the /pages/class.php endpoint via the id and cys parameters. Recommendations For Code-projec...

PT-2025-11526

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/room.php endpoint via the id and rome parameters. This allows for potential malicious script execution...

CVE-2025-29425: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

CVE-2025-29427

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to a Cross Site Scripting (XSS) attack within the profile.php file. The root cause is the lack of effective filtering and escaping of user-supplied data in the member_first and member_last parameters. This vulnerability ...

PT-2025-11549 · Unknown · Code-Projects Online Class/Exam Scheduling System

Name of the Vulnerable Software and Affected Versions: code-projects Online Class and Exam Scheduling System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /pages/activate.php. The manipulation of the id argument leads to SQL injection...

PT-2025-11540

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns SQL Injection in the exam save.php file, specifically via the member and first parameters. This allows for potential manipulation of database...

CVE-2025-29425

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

PT-2025-11555

Name of the Vulnerable Software and Affected Versions code-projects Online Class and Exam Scheduling System version 1.0 Description A critical issue was found in the code-projects Online Class and Exam Scheduling System. The problem is related to an unknown function of the file /pages/salut...