CVE-2025-44134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

CVE-2025-44135: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profileupdate.php. Manipulating the parameter username will cause SQL injection attacks...

PT-2025-11526

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/room.php endpoint via the id and rome parameters. This allows for potential malicious script execution...

CVE-2025-29427: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...

PT-2025-11555

Name of the Vulnerable Software and Affected Versions code-projects Online Class and Exam Scheduling System version 1.0 Description A critical issue was found in the code-projects Online Class and Exam Scheduling System. The problem is related to an unknown function of the file /pages/salut...

PT-2025-11521

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/department.php endpoint via the id, code, and name parameters. This allows for potential malicious script...

CVE-2025-29425

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

CVE-2025-29426: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

CVE-2025-29425: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

PT-2025-11541

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It affects the profile.php file via the member first and member last parameters. This allows for potenti...

PT-2025-11554

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version V1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It affects the /pages/class.php endpoint via the id and cys parameters. Recommendations For Code-projec...

PT-2025-11534

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/program.php endpoint via the id, code, and name parameters. This allows for potential malicious script...

CVE-2025-29431: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/department.php via the id, code, and name parameters...

CVE-2025-2393: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/salutdel.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-29425

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

PT-2025-11540

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns SQL Injection in the exam save.php file, specifically via the member and first parameters. This allows for potential manipulation of database...

CVE-2025-2392: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...

CVE-2025-29430: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/room.php via the id and rome parameters...

CVE-2025-29429: Improper Neutralization of Input During Web Page Generation

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/program.php via the id, code, and name parameters...

CVE-2025-1955: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the argument username leads to cross site...