Lucene search
+L

117 matches found

Positive Technologies
Positive Technologies
•added 2026/06/08 12:00 a.m.•39 views

PT-2026-47203

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the argument Password results in sql injection. It is possible to launch the attack remotely. The exploit has been made publi...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•1 views

CVE-2026-11484: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /archive3.php. This manipulation of the argument sy causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public an...

7.5CVSS5.6AI score0.00275EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•1 views

CVE-2026-11486: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /archive1.php. Performing a manipulation of the argument sy results in sql injection. Remote exploitation of the attack is possible. The...

7.5CVSS5.6AI score0.00275EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•1 views

CVE-2026-11483: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /archive4.php. The manipulation of the argument sy results in sql injection. The attack can be launched remotely. The exploit has been released to the public a...

7.5CVSS5.6AI score0.00275EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•1 views

CVE-2026-11472: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /index1.php. This manipulation of the argument Password causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may ...

7.5CVSS5.6AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•1 views

CVE-2026-11471: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the argument Password results in sql injection. It is possible to launch the attack remotely. The exploit has been made publi...

7.5CVSS5.5AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•1 views

CVE-2026-11485: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive2.php. Such manipulation of the argument sy leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly...

7.5CVSS5.5AI score0.00275EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/08 12:00 a.m.•41 views

PT-2026-47247

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description An issue exists in the file '/archive2.php' where improper handling of the sy argument allows for SQL injection. This allows a remote attacker to manipulate database...

7.5CVSS7.4AI score0.00275EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2026/06/08 12:00 a.m.•95 views

SourceCodester Class and Exam Timetabling System 注入漏洞

SourceCodester Class and Exam Timetabling System is an open-source classroom and exam scheduling system developed by SourceCodester. Version 1.0 of the SourceCodester Class and Exam Timetabling System has a SQL injection vulnerability, which arises from incorrect handling of the parameter "sy" in...

7.5CVSS7.5AI score0.00275EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•0 views

CVE-2026-11482: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /archive5.php. The manipulation of the argument sy leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

7.5CVSS5.6AI score0.0029EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-34267

Malicious code in bioql PyPI...

6.1CVSS4.9AI score0.0059EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/23 3:35 a.m.•20 views

CVE-2023-2814

A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/saveteacher.php of the component POST Parameter Handler. The manipulation of the argument AcademicRank leads to cross site scripting. It is...

6.1CVSS6.2AI score0.0059EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:50 a.m.•14 views

CVE-2023-2823

A vulnerability was found in SourceCodester Class Scheduling System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/editsubject.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS7.4AI score0.00754EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/05/21 12:00 a.m.•11 views

SourceCodester Class Scheduling System 跨站脚本漏洞

Class Scheduling System is a class scheduling system by jkev individual developer. A cross-site scripting vulnerability exists in SourceCodester Class Scheduling System version 1.0, which is caused by unknown code in the file searchteacherresult.php in the component POST Parameter Handler, leadin...

5.4CVSS4.5AI score0.0065EPSS
SaveExploits1References4
Prion
Prion
•added 2023/05/20 8:15 a.m.•28 views

Sql injection

A vulnerability was found in SourceCodester Class Scheduling System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/editsubject.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

6.5CVSS9.7AI score0.00754EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/05/19 5:15 p.m.•32 views

Cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/saveteacher.php of the component POST Parameter Handler. The manipulation of the argument AcademicRank leads to cross site scripting. It is...

4CVSS6AI score0.0059EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/02/26 12:15 p.m.•13 views

CVE-2023-1039

A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql...

8.8CVSS6.8AI score0.00791EPSS
SaveExploits1References3
Rows per page
Query Builder