CVE-2025-8271: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/deletes3.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

PT-2025-31041 · Unknown · Exam Form Submission

Name of the Vulnerable Software and Affected Versions: code-projects Exam Form Submission version 1.0 Description: A vulnerability exists in an unknown functionality of the file /admin/delete s5.php. The manipulation of the argument ID leads to SQL injection. The attack may be launched remotely...

CVE-2025-8253: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an unknown part of the file /admin/deletes6.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-8239 code-projects Exam Form Submission admin sql injection

A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8238 code-projects Exam Form Submission update_s2.php sql injection

A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/updates2.php. The manipulation of the argument credits leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-8238: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/updates2.php. The manipulation of the argument credits leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-8237: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/updates1.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2025-8239: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8240: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /user/dashboard.php. The manipulation of the argument phone leads to sql injection. The attack may be launched remotely. Th...

CVE-2023-42307

Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...

CVE-2023-42308: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section...

CVE-2023-42308

A Cross Site Scripting (XSS) vulnerability exists in the Manage Fastrack Subjects component of Code-Projects Exam Form Submission version 1.0 . The flaw is caused by the improper neutralization of input during web page generation, specifically within the "Subject Name" and "Subject Code" sections...

CVE-2023-42307: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...