CVE-2024-12489 code-projects Online Class and Exam Scheduling System term.php sql injection

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/term.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-12487 code-projects Online Class and Exam Scheduling System room_update.php sql injection

A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/roomupdate.php. The manipulation of the argument id leads to sql injection. The attack can be...

CVE-2024-12487

The CVE-2024-12487 entry affects Code-Projects’ Online Class and Exam Scheduling System 1.0, via /pages/room_update.php where the id parameter can be manipulated to trigger SQL injection. This is a network-accessible vulnerability with a high impact vector (CONFIDENTIALITY, INTEGRITY, AVAILABILIT...

CVE-2024-12486 code-projects Online Class and Exam Scheduling System rank_update.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/rankupdate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. T...

CVE-2024-12486

CVE-2024-12486 affects Code-Projects Online Class and Exam Scheduling System 1.0. The vulnerability is in the file /pages/rank_update.php where the parameter id is not properly validated, leading to a SQL injection. The flaw is exploitable remotely, and an exploit has been disclosed publicly. The...

CVE-2024-12485 code-projects Online Class and Exam Scheduling System department.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...

PT-2024-17622 · Unknown · Code-Projects Online Class/Exam Scheduling System

Name of the Vulnerable Software and Affected Versions: code-projects Online Class and Exam Scheduling System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /pages/term.php. The manipulation of the id argument leads to SQL injection. I...

CVE-2024-12360

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classupdate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-12360

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classupdate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-12360

Affected product: Code-Projects Online Class and Exam Scheduling System 1.0. The vulnerability is a SQL injection in the id parameter of class_update.php, caused by lack of validation/execution of unsafe SQL. Impact sequence: remote attacker could exploit; exploitation details publicly disclosed....

CVE-2024-12360 code-projects Online Class and Exam Scheduling System class_update.php sql injection

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classupdate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-53762

Cross-Site Request Forgery CSRF vulnerability in FasterThemes FastBook fastbook-responsive-appointment-booking-and-scheduling-system allows Stored XSS.This issue affects FastBook: from n/a through = 1.1...

Apache Dolphinscheduler Arbitrary File Read Vulnerability

Apache DolphinScheduler is a distributed DAG visualization-based workflow task scheduling system from the Apache Apache Foundation in the United States. Apache Dolphinscheduler suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

[SECURITY] Fedora 39 Update: slurm-22.05.10-1.fc39

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

School Faculty Scheduling System SQL Injection Vulnerability (CNVD-2023-64628)

School Faculty Scheduling System is a school faculty scheduling system. A SQL injection vulnerability exists in School Faculty Scheduling System v1.0, which stems from a lack of validation of externally entered SQL statements in the parameter id of manageuser.php. An attacker can exploit this...

CVE-2020-36034

SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code, escalate privilieges, and gain sensitive information via crafted payload to id parameter in manageuser.php...

CVE-2020-36034

SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code, escalate privilieges, and gain sensitive information via crafted payload to id parameter in manageuser.php...

Sql injection

SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code, escalate privilieges, and gain sensitive information via crafted payload to id parameter in manageuser.php...

CVE-2020-36034

CVE-2020-36034 describes an SQL injection in the oretnom23 School Faculty Scheduling System v1.0, triggered via the id parameter in manage_user.php. The connected sources consistently state that lack of input validation allows an attacker to manipulate SQL statements, potentially enabling remote ...

CVE-2020-36034

SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code, escalate privilieges, and gain sensitive information via crafted payload to id parameter in manageuser.php...