Lucene search
+L

4 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•0 views

CVE-2025-11105: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /schedulingsystem/addsubject.php. This manipulation of the argument subcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

9.8CVSS5.5AI score0.00417EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•0 views

CVE-2025-11115: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Simple Scheduling System 1.0. Affected by this issue is some unknown functionality of the file /addtime.php. The manipulation of the argument starttime/endtime leads to sql injection. Remote exploitation of the attack is possible. The exploit has be...

9.8CVSS5.5AI score0.00478EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•0 views

CVE-2025-11108: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Simple Scheduling System 1.0. Impacted is an unknown function of the file /schedulingsystem/addroom.php. Executing manipulation of the argument room can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...

9.8CVSS5.6AI score0.00417EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•1 views

CVE-2025-11106: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Simple Scheduling System 1.0. This vulnerability affects unknown code of the file /schedulingsystem/addfaculty.php. Such manipulation of the argument falname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

9.8CVSS5.5AI score0.00417EPSS
SaveExploits1References1
Rows per page
Query Builder