PT-2026-86503

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /delete teacher.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the...

PT-2026-73039

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID argument within an unknown function in the /edit teacher.php file. SQL injection is a technique wher...

CVE-2026-3150

CVE-2026-3150 affects itsourcecode College Management System 1.0. Affected component: /admin/display-teacher.php; root cause is SQL injection caused by manipulating the parameter teacher_id. Vulnerability is exploitable remotely and exploitation has been disclosed publicly. Documents consistently...

PT-2026-21870

Name of the Vulnerable Software and Affected Versions itsourcecode College Management System version 1.0 Description A security issue exists in itsourcecode College Management System version 1.0. The manipulation of the teacher id argument in the file /admin/display-teacher.php can lead to SQL...

CVE-2025-70147: Missing Authentication for Critical Function

Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information including plaintext password field values via direct HTTP GET requests to these endpoints without a valid session...

EUVD-2022-52319

Malicious code in bioql PyPI...

CVE-2025-7179 code-projects Library System add-teacher.php sql injection

A vulnerability classified as critical was found in code-projects Library System 1.0. This vulnerability affects unknown code of the file /add-teacher.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-7179 code-projects Library System add-teacher.php sql injection

A vulnerability classified as critical was found in code-projects Library System 1.0. This vulnerability affects unknown code of the file /add-teacher.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-7179: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Library System 1.0. This vulnerability affects unknown code of the file /add-teacher.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

Code-Projects Library System 注入漏洞

Library System is a library system. The Library System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file /add-teacher.php. An attacker can exploit this vulnerability to execute illega...

CVE-2025-6319

CVE-2025-6319 affects PHPGurukul Pre-School Enrollment System 1.0. Multiple connected sources report a SQL injection in /admin/add-teacher.php via the tsubject/tsubject parameter, enabling remote exploitation and potential unauthorized access to database data. Root cause: unsafely processed exter...

CVE-2025-6319: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. This issue affects some unknown processing of the file /admin/add-teacher.php. The manipulation of the argument tsubject leads to sql injection. The attack may be initiated remotely...

CVE-2025-5625: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /search-teacher.php. The manipulation of the argument searchteacher leads to sql injection. The attack may be initiated remotel...

CVE-2025-4110 PHPGurukul Pre-School Enrollment System edit-teacher.php sql injection

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-teacher.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be launched remotely...

CVE-2025-4110

CVE-2025-4110 affects PHPGurukul Pre-School Enrollment System v1.0. Multiple connected sources confirm a SQL injection in the /admin/edit-teacher.php file via the mobilenumber parameter, with remote exploitation and the exploit disclosed publicly. The issue impacts unknown functionality of that f...

CVE-2025-4110: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-teacher.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be launched remotely...

CVE-2025-0336

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/teacher.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-0336

The CVE-2025-0336 entry concerns Codezips Project Management System version 1.0 with a SQL injection in an unclear area of /pages/forms/teacher.php caused by manipulation of the argument name. Attacks can be launched remotely, and public disclosure is noted. Several connected sources corroborate:...

CVE-2025-0336: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/teacher.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-10737 Codezips Free Exam Hall Seating Management System teacher.php sql injection

A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected is an unknown function of the file /teacher.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has be...