CVE-2025-10687

The CVE-2025-10687 affects SourceCodester Responsive E-Learning System 1.0, specifically the /admin/add_teacher.php file where manipulating the Username parameter triggers a SQL injection. A remote attacker could exploit this after publicly disclosed exploit availability. Multiple connected sourc...

CVE-2025-10687: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. This affects an unknown part of the file /admin/addteacher.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and coul...

CVE-2025-5008

ProjectWorlds Online Time Table Generator v1.0 is affected by a SQL injection in /admin/add_teacher.php via the e parameter. The issue is remotely exploitable and has been disclosed publicly; it can affect confidentiality, integrity, and availability. Root cause: improper handling of user input l...

CVE-2025-5008 projectworlds Online Time Table Generator add_teacher.php sql injection

A vulnerability was found in projectworlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/addteacher.php. The manipulation of the argument e leads to sql injection. The attack may be launched remotely. The...

CVE-2025-5008: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in projectworlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/addteacher.php. The manipulation of the argument e leads to sql injection. The attack may be launched remotely. The...