Online Class and Exam Scheduling System profile.php file cross-site scripting vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter username in the file...

CVE-2025-1955

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the argument username leads to cross site...

CVE-2025-1955: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the argument username leads to cross site...

CVE-2025-0210

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be...

CVE-2024-53762

Cross-Site Request Forgery CSRF vulnerability in FasterThemes FastBook fastbook-responsive-appointment-booking-and-scheduling-system allows Stored XSS.This issue affects FastBook: from n/a through = 1.1...

CVE-2025-0211

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploi...

CVE-2025-0211

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploi...

CVE-2025-0211

CVE-2025-0211 affects Campcodes School Faculty Scheduling System v1.0. The vulnerability is in /admin/index.php, where manipulating the page parameter leads to file inclusion. Described as a remote‑exploitable issue with publicly disclosed exploit. Remediation guidance is not in the Initial Descr...

CVE-2025-0211 Campcodes School Faculty Scheduling System index.php file inclusion

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploi...

CVE-2025-0211 Campcodes School Faculty Scheduling System index.php file inclusion

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploi...

CVE-2025-0210

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be...

CVE-2025-0210 Campcodes School Faculty Scheduling System ajax.php sql injection

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be...

CVE-2025-0210 Campcodes School Faculty Scheduling System ajax.php sql injection

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be...

CVE-2025-0210

CVE-2025-0210 affects Campcodes School Faculty Scheduling System v1.0. The vulnerability is an SQL injection in the parameter username of the file /admin/ajax.php?action=login, enabling remote exploitation. Multiple sources confirm the issue and public exploit availability. The CVSS metrics in th...

PT-2025-3783 · Unknown · Campcodes School Faculty Scheduling System

Name of the Vulnerable Software and Affected Versions: Campcodes School Faculty Scheduling System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /admin/index.php. The manipulation of the page argument leads to file inclusion. Th...

CVE-2025-0211: External Control of File Name or Path

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploi...

CVE-2025-0210: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be...

Campcodes School Faculty Scheduling System 注入漏洞

Campcodes School Faculty Scheduling System is a school faculty scheduling system from Campcodes. An injection vulnerability exists in Campcodes School Faculty Scheduling System version 1.0, which stems from the parameter username in the file /admin/ajax.php?action=login that can cause SQL injecti...

Online Class and Exam Scheduling System class_update.php File SQL Injection Vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. The Online Class and Exam Scheduling System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the id parameter of the classupdate.php page. ...

CVE-2024-12487

A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/roomupdate.php. The manipulation of the argument id leads to sql injection. The attack can be...