5 matches found
EUVD-2026-72174
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is the function mysqliquery of the file /admin/modaladdroom.php. The manipulation of the argument roomname leads to sql injection. The attack is possible to be carried out...
CVE-2026-86225
SourceCodester Class and Exam Timetabling System 1.0 contains a remote SQL injection in the mysqli_query function within /admin/modal_add_room.php, triggered by the unsanitized room_name argument. No authentication or user interaction is required. Impact on confidentiality, integrity, and availab...
EUVD-2007-2872
Malware in sbrugna...
CVE-2014-4569
Cross-site scripting XSS vulnerability in ls/vvlogin.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the roomname parameter...
CVE-2007-2880
Multiple cross-site scripting XSS vulnerabilities in Digirez 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Roomname parameter to room/infobook.asp or the 2 curYear parameter to room/week.asp...