108 matches found
CVE-2024-10447: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. Affected by this vulnerability is an unknown functionality of the file /timetable/staff/staffdashboard.php?info=updateprofile. The manipulation of the argument n leads to sql injection. The attack...
CVE-2024-10446: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. Affected is an unknown function of the file /timetable/admin/admindashboard.php?info=addcourse. The manipulation of the argument c leads to sql injection. It is possible to launch the attack...
PT-2024-16287 · Unknown · Project Worlds Online Time Table Generator
Name of the Vulnerable Software and Affected Versions: Project Worlds Online Time Table Generator version 1.0 Description: A critical issue has been found in the software, affecting an unknown function of the file /timetable/admin/admindashboard.php?info=add course. The manipulation of the argume...
Sql injection
A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-0730 Project Worlds Online Time Table Generator course_ajax.php sql injection
A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-0730
Mode C: CVE-2024-0730 affects Project Worlds Online Time Table Generator 1.0; vulnerable component is course_ajax.php where manipulation of the id parameter leads to SQL injection. The issue is exploitable remotely and has been publicly disclosed (VDB-251553). Remediation details in connected doc...
CVE-2024-0730: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
Project Worlds Online Time Table Generator SQL Injection Vulnerability
Online Time Table Generator is an online time table generator by Yugesh Verma Personal Developer. Project Worlds Online Time Table Generator version 1.0 suffers from a SQL injection vulnerability that stems from the parameter id of the file courseajax.php that can lead to SQL injection...