CVE-2025-11110: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/schoolyear.php. The manipulation of the argument schoolyear results in sql injection. It is possible to launch the attack remotely. The exploit ha...

CVE-2024-50825: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/schoolyear.php in kashipara E-learning Management System Project 1.0 via the schoolyear parameter...

CVE-2024-50842: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/schoolyear.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the schoolyear parameter...