10440 matches found
CVE-2025-2392 code-projects Online Class and Exam Scheduling System activate.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...
CVE-2025-2392
The CVE-2025-2392 entry concerns code-projects Online Class and Exam Scheduling System 1.0. Affected component: the activate.php handling of the id parameter. Root cause: lack of validation/sanitization enabling SQL injection. Impact: remote attacker could manipulate the id to execute SQL command...
CVE-2025-29427
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...
CVE-2025-29425
Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...
CVE-2025-29425
Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...
CVE-2025-29430
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/room.php via the id and rome parameters...
CVE-2025-29429
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/program.php via the id, code, and name parameters...
CVE-2025-29431
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/department.php via the id, code, and name parameters...
USB Video Class Driver Code Execution
The vulnerability of the USB Video Class Driver UVC on Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...
CVE-2025-29429
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/program.php via the id, code, and name parameters...
CVE-2025-29429
The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) in the /pages/program.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data within the id, code, and name parameters. An attacker can exploit thi...
CVE-2025-29426
The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) in the /pages/class.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data within the id and cys parameters, allowing an attacker to inject and ex...
CVE-2025-29431
The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) within the /pages/department.php endpoint. The root cause is the incorrect manipulation and lack of effective filtering or escaping of user-supplied data in the id, code, and name parameters...
e-Excellence U-Office Force security vulnerabilities
e-Excellence U-Office Force is an e-Office platform from China-based First Class Technology e-Excellence. A security vulnerability exists in e-Excellence U-Office Force that stems from improper authentication, which could result in an unauthenticated remote attacker logging in as an administrator...
Code-Projects Online Class and Exam Scheduling System Security Vulnerabilities
Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects open source. A security vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which stems from an incorrect manipulation of the parameters...
Code-Projects Online Class and Exam Scheduling System Security Vulnerabilities
Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects open source. A security vulnerability exists in Code-Projects Online Class and Exam Scheduling System version V1.0, which stems from incorrect manipulation of the parameters id,...
Code-Projects Online Class and Exam Scheduling System Injection Vulnerabilities
Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects open source. An injection vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which stems from an incorrect manipulation of the parameter i...
CVE-2025-29430
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/room.php via the id and rome parameters...
PT-2025-11521
Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/department.php endpoint via the id, code, and name parameters. This allows for potential malicious script...