CVE-2025-70146

Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations e.g.,adding records, deleting records via direct HTTP requests to affected endpoints without a...

CVE-2025-70147

Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information including plaintext password field values via direct HTTP GET requests to these endpoints without a valid session...

Projectworlds Online Time Table Generator has a security vulnerability

Projectworlds Online Time Table Generator is an online schedule generator developed by the Indian company Projectworlds. Version 1.0 of ProjectWorlds Online Time Table Generator has a security vulnerability. This vulnerability stems from the lack of authentication in multiple management scripts,...

CVE-2025-70147: Missing Authentication for Critical Function

Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information including plaintext password field values via direct HTTP GET requests to these endpoints without a valid session...

CVE-2025-70146: Missing Authentication for Critical Function

Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations e.g.,adding records, deleting records via direct HTTP requests to affected endpoints without a...

CVE-2025-70146

The ProjectWorlds Online Time Table Generator 1.0 is vulnerable to an authentication bypass in multiple administrative action scripts located under the /admin/ directory. This security flaw allows remote attackers to perform unauthorized administrative operations, such as adding or deleting recor...

EUVD-2024-33125

Malicious code in bioql PyPI...

EUVD-2024-33124

Malicious code in bioql PyPI...

EUVD-2025-9064

Malicious code in bioql PyPI...

EUVD-2025-7326

Malicious code in bioql PyPI...

EUVD-2025-9641

Malicious code in bioql PyPI...

EUVD-2025-15984

Malicious code in bioql PyPI...

EUVD-2025-15979

Malicious code in bioql PyPI...

EUVD-2025-15981

Malicious code in bioql PyPI...

CVE-2025-7941

A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...

Time Table Generator System Cross-Site Scripting Vulnerability

Time Table Generator System is a time table generator system. A cross-site scripting vulnerability exists in Time Table Generator System, which stems from the adminname parameter in the /admin/profile.php file not effectively filtering user input. No details of the vulnerability are available at...

CVE-2025-7941 PHPGurukul Time Table Generator System profile.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...

CVE-2025-7941

The CVE-2025-7941 entry describes a cross-site scripting vulnerability in PHPGurukul Time Table Generator System 1.0, affecting the /admin/profile.php file via manipulation of the adminname parameter. The issue enables remote attacker-driven script execution and has publicly disclosed exploits. C...

CVE-2025-7941: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...

PHPGurukul Time Table Generator System has a security vulnerability

Time Table Generator System is a time table generator system. A cross-site scripting vulnerability exists in Time Table Generator System, which stems from the adminname parameter in the /admin/profile.php file not effectively filtering user input. No details of the vulnerability are available at...