CVE-2023-7096

CVE-2023-7096 affects code-projects Faculty Management System 1.0. The vulnerability is in /admin/php/crud.php where manipulation of the fieldname/tablename argument allows SQL injection. Exploitation can be remote and, per the published descriptions, the issue has been disclosed/public. The CVSS...

CVE-2023-7057

CVE-2023-7057 affects code-projects’ Faculty Management System 1.0. The vulnerability is a cross-site scripting (XSS) issue in the unknown functionality of /admin/pages/yearlevel.php, triggered by manipulating the Year Level/Section argument. The attack is described as remotely launchable and the...

CVE-2023-7056

The CVE-2023-7056 entry concerns code-projects Faculty Management System 1.0. The vulnerability is a Cross-Site Scripting flaw in the unknown functionality of /admin/pages/subjects.php, triggered by manipulating the Description/Units argument. It can be exploited remotely and the exploit has been...

CVE-2024-0460

CVE-2024-0460 affects code-projects Faculty Management System 1.0. The issue is a SQL injection in the file /admin/pages/student-print.php caused by improper handling of input. The vulnerability can be exploited remotely and has been publicly disclosed. The CVSS metrics in the initial documents i...