EUVD-2025-31374

Malicious code in bioql PyPI...

CVE-2025-11033 kidaze CourseSelectionSystem COUNT3s7.php sql injection

A vulnerability has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Impacted is an unknown function of the file /Profilers/PriProfile/COUNT3s7.php. The manipulation of the argument cbe leads to sql injection. It is possible to initiate the attack remotel...

CVE-2025-11033

The CVE-2025-11033 entry concerns kidaze CourseSelectionSystem and a SQL injection in an unknown function of /Profilers/PriProfile/COUNT3s7.php via the cbe parameter. Remote exploitation is possible, and exploits have been disclosed publicly. Multiple feeds confirm impact is related to SQL inject...