Lucene search
+L

108 matches found

NVD
NVD
•added 2026/02/18 5:21 p.m.•18 views

CVE-2025-70146

Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations e.g.,adding records, deleting records via direct HTTP requests to affected endpoints without a...

9.1CVSS0.00571EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/02/18 12:00 a.m.•21 views

Projectworlds Online Time Table Generator 安全漏洞

Projectworlds Online Time Table Generator is an online schedule generator developed by the Indian company Projectworlds. Version 1.0 of ProjectWorlds Online Time Table Generator has a security vulnerability. This vulnerability stems from the lack of authentication in multiple management scripts,...

9.1CVSS5.8AI score0.00571EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/18 12:00 a.m.•2 views

CVE-2025-70146: Missing Authentication for Critical Function

Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations e.g.,adding records, deleting records via direct HTTP requests to affected endpoints without a...

9.1CVSS5.8AI score0.00571EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/18 12:00 a.m.•1 views

CVE-2025-70147: Missing Authentication for Critical Function

Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information including plaintext password field values via direct HTTP GET requests to these endpoints without a valid session...

7.5CVSS5.8AI score0.00518EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/18 12:00 a.m.•13 views

CVE-2025-70147

Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information including plaintext password field values via direct HTTP GET requests to these endpoints without a valid session...

7.5CVSS5.6AI score0.00518EPSS
SaveExploits1References3
CVE
CVE
•added 2026/02/18 12:00 a.m.•26 views

CVE-2025-70146

The ProjectWorlds Online Time Table Generator 1.0 is vulnerable to an authentication bypass in multiple administrative action scripts located under the /admin/ directory. This security flaw allows remote attackers to perform unauthorized administrative operations, such as adding or deleting recor...

9.1CVSS5.8AI score0.00571EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-33124

Malicious code in bioql PyPI...

7.2CVSS6.6AI score0.00541EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-15981

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00514EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2025-15984

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00514EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-9064

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00477EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2025-15979

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00514EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2025-9641

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00562EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-7326

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00527EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-33125

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00479EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/07/23 9:33 p.m.•18 views

CVE-2025-7941

A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...

5.4CVSS3.7AI score0.00256EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/07/23 12:00 a.m.•10 views

Time Table Generator System Cross-Site Scripting Vulnerability

Time Table Generator System is a time table generator system. A cross-site scripting vulnerability exists in Time Table Generator System, which stems from the adminname parameter in the /admin/profile.php file not effectively filtering user input. No details of the vulnerability are available at...

5.4CVSS6.3AI score0.00256EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/07/21 9:32 p.m.•9 views

CVE-2025-7941 PHPGurukul Time Table Generator System profile.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...

5.1CVSS3.6AI score0.00256EPSS
SaveExploits1References6
CVE
CVE
•added 2025/07/21 9:32 p.m.•47 views

CVE-2025-7941

The CVE-2025-7941 entry describes a cross-site scripting vulnerability in PHPGurukul Time Table Generator System 1.0, affecting the /admin/profile.php file via manipulation of the adminname parameter. The issue enables remote attacker-driven script execution and has publicly disclosed exploits. C...

5.4CVSS3.8AI score0.00256EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/21 12:00 a.m.•1 views

CVE-2025-7941: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...

5.4CVSS4AI score0.00256EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/21 12:00 a.m.•11 views

PHPGurukul Time Table Generator System 安全漏洞

Time Table Generator System is a time table generator system. A cross-site scripting vulnerability exists in Time Table Generator System, which stems from the adminname parameter in the /admin/profile.php file not effectively filtering user input. No details of the vulnerability are available at...

5.4CVSS6.2AI score0.00256EPSS
SaveExploits1References1
Rows per page
Query Builder