4742 matches found
Sql injection
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
Cross site scripting
Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...
CVE-2024-24093
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24097
Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...
CVE-2023-42307
Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...
CVE-2024-24097
The Code-projects Scholars Tracking System 1.0 (developed by Fabian Ros) is vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is the application's lack of effective filtering and escaping of user-supplied data , which allows an attacker to inject a crafted payload into the News Feed...
PT-2024-13037 · Unknown · Code-Projects Exam Form Submission
Name of the Vulnerable Software and Affected Versions: Code-Projects Exam Form Submission version 1.0 Description: The issue allows attackers to run arbitrary code via the Subject Name and Subject Code sections, potentially leading to unauthorized actions. This is a Cross Site Scripting XSS issue...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2023-42308: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section...
CVE-2024-24093
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24093
The Code-projects Scholars Tracking System version 1.0 is vulnerable to a SQL Injection flaw. An attacker can send specially crafted SQL statements via the Personal Information Update information/messages, potentially leading to unauthorized access and data manipulation or allowing the execution ...
CVE-2023-42307
The CVE-2023-42307 entry concerns a Cross Site Scripting (XSS) vulnerability in the Code-Projects Exam Form Submission 1.0. The issue allows an attacker to execute arbitrary code via inputs in the Subject Name and Subject Code fields. Public references in the connected documents consistently desc...
CVE-2023-42307
Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...
CVE-2023-42308
Code-Projects Exam Form Submission version 1.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability within the Manage Fastrack Subjects component. The root cause is the improper neutralization of input, which allows attackers to execute arbitrary code via the Subject Name and Subject Code ...
CVE-2024-24101: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24093: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24097: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...
CVE-2023-42308
Cross Site Scripting XSS vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section...