15637 matches found
CVE-2025-11105 code-projects Simple Scheduling System addsubject.php sql injection
A flaw has been found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /schedulingsystem/addsubject.php. This manipulation of the argument subcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...
Code-Projects Simple Scheduling System SQL Injection Vulnerability
Simple Scheduling System is a simple scheduling system. Simple Scheduling System suffers from a SQL injection vulnerability that stems from the /schedulingsystem/addfaculty.php file not securely filtering the falname parameter. No details of the vulnerability are provided at this time...
Code-Projects Simple Scheduling System SQL Injection Vulnerability
Simple Scheduling System is a simple scheduling system. Simple Scheduling System suffers from a SQL injection vulnerability that stems from the /schedulingsystem/addcourse.php file not securely filtering the corcode parameter, no details of the vulnerability are available at this time...
PT-2025-39773
Name of the Vulnerable Software and Affected Versions code-projects Simple Scheduling System version 1.0 Description A flaw exists in code-projects Simple Scheduling System 1.0, specifically within the /schedulingsystem/addsubject.php file. Manipulation of the subcode argument can lead to SQL...
Code-Projects Simple Scheduling System SQL Injection Vulnerability
Simple Scheduling System is a simple scheduling system. Simple Scheduling System suffers from a SQL injection vulnerability that stems from the /schedulingsystem/addsubject.php file not securely filtering the subcode parameter. No details of the vulnerability are available at this time...
PT-2025-39787
Name of the Vulnerable Software and Affected Versions code-projects Simple Scheduling System version 1.0 Description A flaw exists in code-projects Simple Scheduling System 1.0, specifically within the /add.home.php file. Manipulation of the faculty argument can lead to SQL injection. This issue ...
PT-2025-39786
Name of the Vulnerable Software and Affected Versions Simple Scheduling System version 1.0 Description A flaw exists in an unknown functionality within the /addtime.php file. The manipulation of the starttime/endtime argument can lead to a SQL injection. Remote exploitation is possible. The explo...
CVE-2025-11105: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /schedulingsystem/addsubject.php. This manipulation of the argument subcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...
CVE-2025-11106: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Simple Scheduling System 1.0. This vulnerability affects unknown code of the file /schedulingsystem/addfaculty.php. Such manipulation of the argument falname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...
CVE-2025-11108: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Simple Scheduling System 1.0. Impacted is an unknown function of the file /schedulingsystem/addroom.php. Executing manipulation of the argument room can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...
CVE-2025-11107: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Simple Scheduling System 1.0. This issue affects some unknown processing of the file /schedulingsystem/addcourse.php. Performing manipulation of the argument corcode results in sql injection. The attack is possible to be carried out remotely. The exploit...
CVE-2025-11115: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Simple Scheduling System 1.0. Affected by this issue is some unknown functionality of the file /addtime.php. The manipulation of the argument starttime/endtime leads to sql injection. Remote exploitation of the attack is possible. The exploit has be...
CVE-2025-11116: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /add.home.php. The manipulation of the argument faculty results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. Other...
PT-2025-39774
Name of the Vulnerable Software and Affected Versions Simple Scheduling System version 1.0 Description A SQL injection issue exists in Simple Scheduling System version 1.0. The issue affects unknown code within the /schedulingsystem/addfaculty.php file. Manipulation of the falname argument can le...
PT-2025-39776
Name of the Vulnerable Software and Affected Versions Simple Scheduling System version 1.0 Description A flaw exists in Simple Scheduling System 1.0 that could allow for SQL injection. The issue is located in the /schedulingsystem/addroom.php file, specifically through manipulation of the room...
CVE-2025-60124
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Hellyer Simple Colorbox simple-colorbox allows Stored XSS.This issue affects Simple Colorbox: from n/a through = 1.6.1...
CVE-2025-60142
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DaganLev Simple Meta Tags simple-meta-tags allows DOM-Based XSS.This issue affects Simple Meta Tags: from n/a through = 1.5...
CVE-2025-59362
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c...
WordPress Simple Meta Tags Plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Simple Meta Tags versions = 1.5...
WordPress Simple Colorbox Plugin <= 1.6.1 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Prissy in WordPress Plugin Simple Colorbox versions = 1.6.1...