Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 8:17 a.m.2 views

CVE-2024-10447

A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. Affected by this vulnerability is an unknown functionality of the file /timetable/staff/staffdashboard.php?info=updateprofile. The manipulation of the argument n leads to sql injection. The attack...

8.8CVSS7.4AI score0.00104EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/02 12:11 a.m.10 views

CVE-2025-45007

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter...

4.8CVSS6.3AI score0.00167EPSS
Exploits1References1
NVD
NVD
added 2025/04/30 1:15 p.m.16 views

CVE-2025-45007

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter...

4.8CVSS0.00167EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/04/30 12:0 a.m.1 views

PHPGurukul Timetable Generator System 安全漏洞

PHPGurukul Timetable Generator System is a timetable generator system from PHPGurukul. A security vulnerability exists in PHPGurukul Timetable Generator System v1.0, which stems from improper handling of the adminname parameter in the profile.php file, which could lead to a reflective cross-site...

4.8CVSS6AI score0.00167EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/04/30 12:0 a.m.9 views

CVE-2025-45007

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter...

0.00167EPSS
Exploits1References1
CVE
CVE
added 2025/04/30 12:0 a.m.55 views

CVE-2025-45007

CVE-2025-45007 affects PHPGurukul Timetable Generator System v1.0, via the profile.php file. The vulnerability is a reflected Cross-Site Scripting (XSS) where the adminname parameter in a POST request can cause arbitrary JavaScript execution. Impact is consistent with a reflected XSS allowing scr...

4.8CVSS6.2AI score0.00167EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/30 12:0 a.m.2 views

PT-2025-18272 · Unknown · Phpgurukul Time Table Generator System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Timetable Generator System version 1.0 Description: A Reflected Cross-Site Scripting XSS issue was discovered in the profile.php file. This issue allows remote attackers to execute arbitrary JavaScript code via the adminname...

4.8CVSS6.2AI score0.00167EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/04/30 12:0 a.m.8 views

CVE-2025-45007

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter...

6.3AI score0.00167EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.1 views

Online Time Table Generator SQL注入漏洞

Online Time Table Generator is an online time table generator by Yugesh Verma Personal Developer. A SQL injection vulnerability exists in Online Time Table Generator version 1.0, which stems from the parameter c in the file /timetable/admin/admindashboard.php?info=addcourse that can lead to SQL...

7.2CVSS7AI score0.00104EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/01/19 12:0 a.m.2 views

PT-2024-15787 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Time Table Generator version 1.0 Description: A critical issue was found in the file course ajax.php, where the manipulation of the id argument leads to sql injection. This can be initiated remotely. The issue has been...

9.8CVSS7.5AI score0.00081EPSS
Exploits1References6
Rows per page
Query Builder