Lucene search
K

91 matches found

NVD
NVD
added 2026/02/18 5:21 p.m.4 views

CVE-2025-70146

Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations e.g.,adding records, deleting records via direct HTTP requests to affected endpoints without a...

9.1CVSS0.00551EPSS
Exploits1References2
CVE
CVE
added 2026/02/18 12:0 a.m.5 views

CVE-2025-70146

CVE-2025-70146 affects ProjectWorlds Online Time Table Generator 1.0. Multiple administrative action scripts under /admin/ lack authentication, enabling remote attackers to perform unauthorized admin operations (e.g., add/delete records) via direct HTTP requests without a valid session. The vulne...

9.1CVSS5.6AI score0.00551EPSS
Exploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/18 12:0 a.m.4 views

CVE-2025-70147

Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information including plaintext password field values via direct HTTP GET requests to these endpoints without a valid session...

7.5CVSS5.6AI score0.00281EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/02/18 12:0 a.m.3 views

Projectworlds Online Time Table Generator 安全漏洞

Projectworlds Online Time Table Generator is an online schedule generator developed by the Indian company Projectworlds. Version 1.0 of ProjectWorlds Online Time Table Generator has a security vulnerability. This vulnerability stems from the lack of authentication in multiple management scripts,...

9.1CVSS5.8AI score0.00551EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-9641

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00206EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-9064

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00236EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-15984

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00223EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-15981

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00205EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-15979

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00223EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-33125

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00104EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-7326

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00073EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-33124

Malicious code in bioql PyPI...

7.2CVSS6.6AI score0.00104EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/07/23 9:33 p.m.3 views

CVE-2025-7941

A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...

5.4CVSS3.7AI score0.00218EPSS
Exploits1References1
CNVD
CNVD
added 2025/07/23 12:0 a.m.2 views

Time Table Generator System Cross-Site Scripting Vulnerability

Time Table Generator System is a time table generator system. A cross-site scripting vulnerability exists in Time Table Generator System, which stems from the adminname parameter in the /admin/profile.php file not effectively filtering user input. No details of the vulnerability are available at...

5.4CVSS6.3AI score0.00218EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/07/21 9:32 p.m.3 views

CVE-2025-7941 PHPGurukul Time Table Generator System profile.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. Th...

5.1CVSS3.6AI score0.00218EPSS
Exploits1References6
CVE
CVE
added 2025/07/21 9:32 p.m.18 views

CVE-2025-7941

The CVE-2025-7941 entry describes a cross-site scripting vulnerability in PHPGurukul Time Table Generator System 1.0, affecting the /admin/profile.php file via manipulation of the adminname parameter. The issue enables remote attacker-driven script execution and has publicly disclosed exploits. C...

5.4CVSS3.7AI score0.00218EPSS
Exploits1References6Affected Software1
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.2 views

PHPGurukul Time Table Generator System 安全漏洞

Time Table Generator System is a time table generator system. A cross-site scripting vulnerability exists in Time Table Generator System, which stems from the adminname parameter in the /admin/profile.php file not effectively filtering user input. No details of the vulnerability are available at...

5.4CVSS6.2AI score0.00218EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:18 p.m.5 views

CVE-2025-5008

A vulnerability was found in projectworlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/addteacher.php. The manipulation of the argument e leads to sql injection. The attack may be launched remotely. The...

9.8CVSS7.7AI score0.00223EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:18 p.m.5 views

CVE-2025-5004

A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/addcourse.php. The manipulation of the argument c/subname leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS7.7AI score0.00223EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:14 p.m.7 views

CVE-2025-5003

A vulnerability has been found in projectworlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file /semesterajax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.6AI score0.00205EPSS
Exploits1References1
Rows per page
Query Builder