369 matches found
CVE-2025-29430
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/room.php via the id and rome parameters...
CVE-2025-29426: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...
CVE-2025-29427: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...
CVE-2025-29425
Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...
CVE-2025-29429: Improper Neutralization of Input During Web Page Generation
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/program.php via the id, code, and name parameters...
CVE-2025-29431: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/department.php via the id, code, and name parameters...
PT-2025-11549 · Unknown · Code-Projects Online Class/Exam Scheduling System
Name of the Vulnerable Software and Affected Versions: code-projects Online Class and Exam Scheduling System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /pages/activate.php. The manipulation of the id argument leads to SQL injection...
CVE-2025-29425
Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...
CVE-2025-2393: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/salutdel.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2025-29430: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/room.php via the id and rome parameters...
PT-2025-11521
Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/department.php endpoint via the id, code, and name parameters. This allows for potential malicious script...
PT-2025-11526
Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/room.php endpoint via the id and rome parameters. This allows for potential malicious script execution...
CVE-2025-2392: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...
CVE-2025-29427
The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to a Cross Site Scripting (XSS) attack within the profile.php file. The root cause is the lack of effective filtering and escaping of user-supplied data in the member_first and member_last parameters. This vulnerability ...
CVE-2025-29429
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/program.php via the id, code, and name parameters...
CVE-2025-29429
The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) in the /pages/program.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data within the id, code, and name parameters. An attacker can exploit thi...
CVE-2025-29425: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...
CVE-2025-2061: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The...
CVE-2025-1955: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the argument username leads to cross site...