4876 matches found
PT-2024-13036
Name of the Vulnerable Software and Affected Versions Code-Projects Exam Form Submission version 1.0 Description A Cross Site Scripting XSS issue affects the software, allowing attackers to execute arbitrary code through the Subject Name and Subject Code sections. This enables attackers to run...
CVE-2023-42308
Cross Site Scripting XSS vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section...
CVE-2024-24093
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24097
Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...
PT-2024-13037 · Unknown · Code-Projects Exam Form Submission
Name of the Vulnerable Software and Affected Versions: Code-Projects Exam Form Submission version 1.0 Description: The issue allows attackers to run arbitrary code via the Subject Name and Subject Code sections, potentially leading to unauthorized actions. This is a Cross Site Scripting XSS issue...
CVE-2024-24093
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2023-42307
Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...
CVE-2024-24097
Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...
CVE-2023-42308
A Cross Site Scripting (XSS) vulnerability exists in the Manage Fastrack Subjects component of Code-Projects Exam Form Submission version 1.0 . The flaw is caused by the improper neutralization of input during web page generation, specifically within the "Subject Name" and "Subject Code" sections...
PT-2024-20272
Name of the Vulnerable Software and Affected Versions Code-projects Scholars Tracking System version 1.0 Description The issue concerns SQL Injection under the Eligibility Information Update feature. This allows for potential manipulation of database queries, which could lead to unauthorized data...
CVE-2023-42307: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...
CVE-2023-42308: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section...
CVE-2024-24101: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2023-41014
code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."...
PT-2024-12915 · Unknown · Code-Projects.Org Online Job Portal
Name of the Vulnerable Software and Affected Versions: code-projects.org Online Job Portal version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the "/Employer/DeleteJob.php?JobId=1" API endpoint, specifically through the JobId variable. This allows for potential...
CVE-2023-41015
The code-projects.org Online Job Portal version 1.0 is vulnerable to SQL Injection via the /Employer/DeleteJob.php?JobId=1 API endpoint. The vulnerability exists because the JobId variable is improperly neutralized, potentially allowing unauthorized access to and manipulation of data. No official...
