SourceCodester CET Automated Grading System with AI Predictive Analytics – Cross-site Script Vulnerabilities

SourceCodester CET Automated Grading System with AI Predictive Analytics is an open-source English language assessment system based on artificial intelligence predictive analytics, developed by SourceCodester. Version 1.0 of the SourceCodester CET Automated Grading System with AI Predictive...

PT-2026-35819

Name of the Vulnerable Software and Affected Versions School Management System by mahmoudai1 affected versions not specified Description A reflected Cross-Site Scripting XSS issue allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser. This occurs because th...

CVE-2025-10600

A flaw has been found in SourceCodester Online Exam Form Submission 1.0. This impacts an unknown function of the file /register.php. This manipulation of the argument img causes unrestricted upload. It is possible to initiate the attack remotely. The exploit has been published and may be used...

Exploit for SQL Injection in Piwigo

CVE-2024-43018 - x Assign an ID - Be officially populate...

Piwigo security vulnerabilities

Piwigo is Piwigo open source a set of Web-based open source image library software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo 13.8.0 and earlier versions, which stems from the unvalidated...

PuneethReddyHC Event Management Cross-Site Script Vulnerability

PuneethReddyHC Event Management is an application by Puneeth Reddy H C Individual Developer. Helps users to register for events organized in university festivals with simple logic and security. A cross-site scripting vulnerability exists in PuneethReddyHC Event Management version 1.0, which...

CVE-2019-13488

A cross-site scripting XSS vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend method is used...