19 matches found
CVE-2025-14566
A security flaw has been discovered in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. The impacted element is an unknown function of the file /Profilers/SProfile/reg.php. Performing a manipulation of the argument USN results in sql injection. It is possible to initia...
PT-2025-50944
Name of the Vulnerable Software and Affected Versions kidaze CourseSelectionSystem versions prior to 42cd892b40a18d50bd4ed1905fa89f939173a464 Description A security flaw exists in kidaze CourseSelectionSystem. Manipulation of the USN argument in the /Profilers/SProfile/reg.php file can lead to SQ...
EUVD-2025-31374
Malicious code in bioql PyPI...
EUVD-2025-29259
Malicious code in bioql PyPI...
EUVD-2025-31377
Malicious code in bioql PyPI...
CVE-2025-11052
A security flaw has been discovered in kidaze CourseSelectionSystem 1.0/5.php. The impacted element is an unknown function of the file /Profilers/PriProfile/COUNT3s5.php. Performing manipulation of the argument csslc results in sql injection. The attack can be initiated remotely. The exploit has...
CVE-2025-11089
A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This impacts an unknown function of the file /Profilers/PriProfile/COUNT3s4.php. Executing manipulation of the argument cbranch can lead to sql injection. It is possible to launch the...
PT-2025-39752
Name of the Vulnerable Software and Affected Versions kidaze CourseSelectionSystem versions prior to 42cd892b40a18d50bd4ed1905fa89f939173a464 Description A flaw exists in kidaze CourseSelectionSystem that allows for sql injection. The issue is due to the manipulation of the cbranch argument. This...
CourseSelectionSystem SQL注入漏洞
CourseSelectionSystem is a simple online course selection system by the individual developer of kidaze. CourseSelectionSystem suffers from a SQL injection vulnerability, which stems from an incorrect manipulation of the parameter cbranch in the file /Profilers/PriProfile/COUNT3s4.php, which could...
CourseSelectionSystem SQL注入漏洞
CourseSelectionSystem is a simple online course selection system by kidaze individual developer. A SQL injection vulnerability exists in CourseSelectionSystem version 1.0, which originates from an incorrect manipulation of the parameter csslc in the file /Profilers/PriProfile/COUNT3s5.php, which...
CVE-2025-11032
A flaw has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This issue affects some unknown processing of the file /Profilers/PriProfile/COUNT3s6.php. Executing manipulation of the argument CPU can lead to sql injection. The attack may be performed from...
CVE-2025-11032
CVE-2025-11032 affects kidaze CourseSelectionSystem (pre-42cd892b40a18d50bd4ed1905fa89f939173a464). The flaw stems from improper handling of the CPU argument in /Profilers/PriProfile/COUNT3s6.php, enabling remote, network-based SQL injection with no required privileges or user interaction. Exploi...
PT-2025-39668
Name of the Vulnerable Software and Affected Versions kidaze CourseSelectionSystem versions prior to 42cd892b40a18d50bd4ed1905fa89f939173a464 Description A flaw exists in kidaze CourseSelectionSystem that allows for SQL injection. The issue stems from the manipulation of the CPU argument during...
CVE-2025-10665
A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Affected is an unknown function of the file /Profilers/PProfile/COUNT3s3.php. The manipulation of the argument csem leads to sql injection. Remote exploitation of the attack is possible...
CVE-2025-10597
A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This vulnerability affects unknown code of the file /Profilers/PriProfile/COUNT2.php. This manipulation of the argument cname causes sql injection. The attack may be initiated remotely...
CVE-2025-10665
A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Affected is an unknown function of the file /Profilers/PProfile/COUNT3s3.php. The manipulation of the argument csem leads to sql injection. Remote exploitation of the attack is possible...
CVE-2025-10477
A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. The affected element is an unknown function of the file /Profilers/PriProfile/eligibility.php. Such manipulation of the argument Branch leads to sql injection. The attack can be launched...
CVE-2025-10477
A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. The affected element is an unknown function of the file /Profilers/PriProfile/eligibility.php. Such manipulation of the argument Branch leads to sql injection. The attack can be launched...
PT-2025-37759
Name of the Vulnerable Software and Affected Versions: kidaze CourseSelectionSystem affected versions not specified Description: A vulnerability exists in kidaze CourseSelectionSystem related to SQL injection. Manipulation of the Branch argument in an unknown function within the...