17 matches found
CVE-2025-14940
CVE-2025-14940 affects Code-Projects Scholars Tracking System 1.0. The vulnerability resides in the /admin/delete_user.php file where an unknown function manipulates the ID parameter, allowing a SQL injection. This can be triggered remotely and, per multiple sources, the exploit has been publicly...
CVE-2025-14950: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /deletepost.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to t...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24099
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...
CVE-2024-24093
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24101: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
PT-2024-20272
Name of the Vulnerable Software and Affected Versions Code-projects Scholars Tracking System version 1.0 Description The issue concerns SQL Injection under the Eligibility Information Update feature. This allows for potential manipulation of database queries, which could lead to unauthorized data...
CVE-2024-24093: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24097: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...
CVE-2024-24097
A Cross-Site Scripting (XSS) vulnerability exists in Code-projects Scholars Tracking System 1.0 , developed by Fabian Ros. The flaw stems from a lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject a crafted payload to execute arbitrary web scripts or...
CVE-2024-24098
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...
CVE-2024-24098: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...
CVE-2024-24099
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...
CVE-2024-24099
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...
CVE-2024-24099: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...