Lucene search
+L

108 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•2 views

CVE-2024-10447: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. Affected by this vulnerability is an unknown functionality of the file /timetable/staff/staffdashboard.php?info=updateprofile. The manipulation of the argument n leads to sql injection. The attack...

8.8CVSS6.5AI score0.00479EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•2 views

CVE-2024-10446: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. Affected is an unknown function of the file /timetable/admin/admindashboard.php?info=addcourse. The manipulation of the argument c leads to sql injection. It is possible to launch the attack...

7.2CVSS6.4AI score0.00541EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/10/28 12:00 a.m.•14 views

PT-2024-16287 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Time Table Generator version 1.0 Description: A critical issue has been found in the software, affecting an unknown function of the file /timetable/admin/admindashboard.php?info=add course. The manipulation of the argume...

7.2CVSS6.9AI score0.00541EPSS
SaveExploits1References8
Prion
Prion
•added 2024/01/19 7:15 p.m.•33 views

Sql injection

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS7.7AI score0.00591EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/19 7:00 p.m.•15 views

CVE-2024-0730 Project Worlds Online Time Table Generator course_ajax.php sql injection

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS7.3AI score0.00591EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/19 7:00 p.m.•65 views

CVE-2024-0730

Mode C: CVE-2024-0730 affects Project Worlds Online Time Table Generator 1.0; vulnerable component is course_ajax.php where manipulation of the id parameter leads to SQL injection. The issue is exploitable remotely and has been publicly disclosed (VDB-251553). Remediation details in connected doc...

9.8CVSS9.7AI score0.00591EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/19 12:00 a.m.•2 views

CVE-2024-0730: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS6.6AI score0.00591EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/19 12:00 a.m.•10 views

Project Worlds Online Time Table Generator SQL Injection Vulnerability

Online Time Table Generator is an online time table generator by Yugesh Verma Personal Developer. Project Worlds Online Time Table Generator version 1.0 suffers from a SQL injection vulnerability that stems from the parameter id of the file courseajax.php that can lead to SQL injection...

9.8CVSS8AI score0.00591EPSS
SaveExploits1References4
Rows per page
Query Builder