108 matches found
CVE-2025-70146
Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations e.g.,adding records, deleting records via direct HTTP requests to affected endpoints without a...
Projectworlds Online Time Table Generator 安全漏洞
Projectworlds Online Time Table Generator is an online schedule generator developed by the Indian company Projectworlds. Version 1.0 of ProjectWorlds Online Time Table Generator has a security vulnerability. This vulnerability stems from the lack of authentication in multiple management scripts,...
CVE-2025-70146: Missing Authentication for Critical Function
Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations e.g.,adding records, deleting records via direct HTTP requests to affected endpoints without a...
CVE-2025-70147: Missing Authentication for Critical Function
Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information including plaintext password field values via direct HTTP GET requests to these endpoints without a valid session...
CVE-2025-70147
Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information including plaintext password field values via direct HTTP GET requests to these endpoints without a valid session...
CVE-2025-70146
The ProjectWorlds Online Time Table Generator 1.0 is vulnerable to an authentication bypass in multiple administrative action scripts located under the /admin/ directory. This security flaw allows remote attackers to perform unauthorized administrative operations, such as adding or deleting recor...
EUVD-2024-33124
Malicious code in bioql PyPI...
EUVD-2025-15981
Malicious code in bioql PyPI...
EUVD-2025-15984
Malicious code in bioql PyPI...
EUVD-2025-9064
Malicious code in bioql PyPI...
EUVD-2025-15979
Malicious code in bioql PyPI...
EUVD-2025-9641
Malicious code in bioql PyPI...
EUVD-2025-7326
Malicious code in bioql PyPI...
EUVD-2024-33125
Malicious code in bioql PyPI...
CVE-2025-7941
A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...
Time Table Generator System Cross-Site Scripting Vulnerability
Time Table Generator System is a time table generator system. A cross-site scripting vulnerability exists in Time Table Generator System, which stems from the adminname parameter in the /admin/profile.php file not effectively filtering user input. No details of the vulnerability are available at...
CVE-2025-7941 PHPGurukul Time Table Generator System profile.php cross site scripting
A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...
CVE-2025-7941
The CVE-2025-7941 entry describes a cross-site scripting vulnerability in PHPGurukul Time Table Generator System 1.0, affecting the /admin/profile.php file via manipulation of the adminname parameter. The issue enables remote attacker-driven script execution and has publicly disclosed exploits. C...
CVE-2025-7941: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...
PHPGurukul Time Table Generator System 安全漏洞
Time Table Generator System is a time table generator system. A cross-site scripting vulnerability exists in Time Table Generator System, which stems from the adminname parameter in the /admin/profile.php file not effectively filtering user input. No details of the vulnerability are available at...