PT-2025-43946

Name of the Vulnerable Software and Affected Versions Abdullah-Hasan-Sajjad Online-School versions prior to f09dda77b4c29aa083ff57f4b1eb991b98b68883 Description A flaw exists in Abdullah-Hasan-Sajjad Online-School. The issue is related to the manipulation of the Email argument in the...

PT-2025-44046

Name of the Vulnerable Software and Affected Versions shawon100 RUET OJ versions up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5 Description A flaw exists in shawon100 RUET OJ that allows for SQL injection through manipulation of the ID argument when processing the /description.php file. This issu...

PT-2025-43759

Name of the Vulnerable Software and Affected Versions ajayrandhawa User-Management-PHP-MYSQL versions prior to fedcf58797bf2791591606f7b61fdad99ad8bff1 Description A flaw exists within the User Management Interface component of the software, specifically concerning file uploads. Manipulation of t...

CVE-2025-11659

A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this vulnerability is an unknown functionality of the file /assets/uploadNotes.php. This manipulation of the argument File causes unrestricted upload. Remote...

EUVD-2025-33955

A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this vulnerability is an unknown functionality of the file /assets/uploadNotes.php. This manipulation of the argument File causes unrestricted upload. Remote...

EUVD-2025-33956

A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected is an unknown function of the file /assets/changeSllyabus.php. The manipulation of the argument File results in unrestricted upload. The attack may be launched...

CVE-2025-11606

A security flaw has been discovered in iPynch Social Network Website up to b6933b6d7f82c84819abe458ccf0e59d61119541. The affected element is an unknown function of the component Search. Performing manipulation results in sql injection. The attack is possible to be carried out remotely. The exploi...

CVE-2025-11661

A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public an...

CVE-2025-11661

A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public an...

CVE-2025-11659

A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this vulnerability is an unknown functionality of the file /assets/uploadNotes.php. This manipulation of the argument File causes unrestricted upload. Remote...

CVE-2025-11658

A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected is an unknown function of the file /assets/changeSllyabus.php. The manipulation of the argument File results in unrestricted upload. The attack may be launched...

CVE-2025-11659

ProjectsAndPrograms School Management System is affected by CVE-2025-11659 due to a flaw in the /assets/uploadNotes.php File parameter, enabling unrestricted file upload. Reports indicate remote exploitation is possible and an exploit has been published. The issue stems from insufficient validati...

CVE-2025-11657

CVE-2025-11657 affects ProjectsAndPrograms School Management System, up to version 6b6fae5426044f89c08d0dd101c7fa71f9042a59. The vulnerability is in the /assets/createNotice.php script where manipulation of the File parameter enables unrestricted file uploads. This can be triggered remotely and i...

PT-2025-41748

Name of the Vulnerable Software and Affected Versions ProjectsAndPrograms School Management System versions prior to 6b6fae5426044f89c08d0dd101c7fa71f9042a59 Description A security issue exists in ProjectsAndPrograms School Management System related to unrestricted file upload. This is due to...

PT-2025-41746

Name of the Vulnerable Software and Affected Versions ProjectsAndPrograms School Management System versions prior to 6b6fae5426044f89c08d0dd101c7fa71f9042a59 Description A security flaw exists in ProjectsAndPrograms School Management System that allows unrestricted file upload. The issue is locat...

PT-2025-41752

Name of the Vulnerable Software and Affected Versions ProjectsAndPrograms School Management System versions prior to commit hash 6b6fae5426044f89c08d0dd101c7fa71f9042a59 Description A flaw exists in ProjectsAndPrograms School Management System that allows attackers to bypass authentication. This ...

CVE-2025-11628

A flaw has been found in jimit105 Project-Online-Shopping-Website up to 7d892f442bd8a96dd242dbe2b9bd5ed641e13e64. This affects an unknown function of the file /delete.php of the component Product Inventory Handler. This manipulation of the argument productcode causes sql injection. It is possible...

PT-2025-41706

Name of the Vulnerable Software and Affected Versions jimit105 Project-Online-Shopping-Website versions up to 7d892f442bd8a96dd242dbe2b9bd5ed641e13e64 Description A flaw exists in the Product Inventory Handler component of jimit105 Project-Online-Shopping-Website. The issue involves a SQL injecti...

CVE-2025-11606

A security flaw has been discovered in iPynch Social Network Website up to b6933b6d7f82c84819abe458ccf0e59d61119541. The affected element is an unknown function of the component Search. Performing manipulation results in sql injection. The attack is possible to be carried out remotely. The exploi...

CVE-2025-11606 iPynch Social Network Website Search sql injection

A security flaw has been discovered in iPynch Social Network Website up to b6933b6d7f82c84819abe458ccf0e59d61119541. The affected element is an unknown function of the component Search. Performing manipulation results in sql injection. The attack is possible to be carried out remotely. The exploi...