PT-2024-36598 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 2.3 through 15.10.8 XWiki Platform versions 16.3.0 before the patch Description: The issue allows any user with script rights to perform arbitrary remote code execution by adding instances of XWiki.ConfigurableClass to...

CVE-2024-12490 code-projects Online Class and Exam Scheduling System teacher_save.php sql injection

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /pages/teachersave.php. The manipulation of the argument salut leads to sql injection. The attack can be initiated remotely...

CVE-2024-12490

CVE-2024-12490 affects the code-projects Online Class and Exam Scheduling System 1.0. The vulnerability exists in the /pages/teacher_save.php file, where the salut parameter can be manipulated to perform SQL injection. Exploitation is remote and has been disclosed publicly. Multiple connected rep...

CVE-2024-12490 code-projects Online Class and Exam Scheduling System teacher_save.php sql injection

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /pages/teachersave.php. The manipulation of the argument salut leads to sql injection. The attack can be initiated remotely...

CVE-2024-12489

CVE-2024-12489 affects code-projects Online Class and Exam Scheduling System 1.0, specifically the /pages/term.php file where the id parameter enables SQL injection. The vulnerability allows remote initiation of an attack and is supported by multiple sources in connected documents. Root cause: la...

CVE-2024-12489 code-projects Online Class and Exam Scheduling System term.php sql injection

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/term.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-12489 code-projects Online Class and Exam Scheduling System term.php sql injection

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/term.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-12488 code-projects Online Class and Exam Scheduling System subject_update.php sql injection

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subjectupdate.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2024-12488

Code-Projects Online Class and Exam Scheduling System 1.0 is affected by a SQL injection in the /pages/subject_update.php file via the id parameter. The vulnerability, described across multiple sources (NVD, CVE records, CNVD, Red Hat, CNVD mirrors), indicates remote exploitation with publicly di...

CVE-2024-12488 code-projects Online Class and Exam Scheduling System subject_update.php sql injection

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subjectupdate.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2024-12487 code-projects Online Class and Exam Scheduling System room_update.php sql injection

A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/roomupdate.php. The manipulation of the argument id leads to sql injection. The attack can be...

CVE-2024-12487 code-projects Online Class and Exam Scheduling System room_update.php sql injection

A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/roomupdate.php. The manipulation of the argument id leads to sql injection. The attack can be...

CVE-2024-12487

The CVE-2024-12487 entry affects Code-Projects’ Online Class and Exam Scheduling System 1.0, via /pages/room_update.php where the id parameter can be manipulated to trigger SQL injection. This is a network-accessible vulnerability with a high impact vector (CONFIDENTIALITY, INTEGRITY, AVAILABILIT...

CVE-2024-12486 code-projects Online Class and Exam Scheduling System rank_update.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/rankupdate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. T...

CVE-2024-12486

CVE-2024-12486 affects Code-Projects Online Class and Exam Scheduling System 1.0. The vulnerability is in the file /pages/rank_update.php where the parameter id is not properly validated, leading to a SQL injection. The flaw is exploitable remotely, and an exploit has been disclosed publicly. The...

CVE-2024-12485 code-projects Online Class and Exam Scheduling System department.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...

CVE-2024-12485 code-projects Online Class and Exam Scheduling System department.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...

PT-2024-9563 · Unknown · Simplexlsx

Name of the Vulnerable Software and Affected Versions: SimpleXLSX class affected versions not specified Description: The issue is related to a lack of sanitization in the SimpleXLSX class for reading files. This could allow a remote attacker to execute arbitrary code. Recommendations: At the...

PT-2024-17620

Name of the Vulnerable Software and Affected Versions code-projects Online Class and Exam Scheduling System version 1.0 Description A critical issue has been found in the system, affecting an unknown functionality of the file /pages/room update.php. The manipulation of the id argument leads to SQ...

PT-2024-17619 · Unknown · Code-Projects Online Class/Exam Scheduling System

Name of the Vulnerable Software and Affected Versions: code-projects Online Class and Exam Scheduling System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /pages/rank update.php. The manipulation of the id argument leads to SQL...