16 matches found
CVE-2025-14950: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /deletepost.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to t...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24099
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...
CVE-2024-24093
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24097
A Cross-Site Scripting (XSS) vulnerability exists in Code-projects Scholars Tracking System 1.0 , developed by Fabian Ros. The flaw stems from a lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject a crafted payload to execute arbitrary web scripts or...
PT-2024-20272
Name of the Vulnerable Software and Affected Versions Code-projects Scholars Tracking System version 1.0 Description The issue concerns SQL Injection under the Eligibility Information Update feature. This allows for potential manipulation of database queries, which could lead to unauthorized data...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24101: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24093: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24097: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...
CVE-2024-24098
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...
CVE-2024-24098: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...
CVE-2024-24099
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...
CVE-2024-24099: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...