CVE-2023-2814

SourceCodester Class Scheduling System 1.0 contains a cross-site scripting vulnerability in the POST Parameter Handler, specifically via the Academic_Rank parameter in /admin/save_teacher.php. The flaw arises from insufficient input filtering/escaping, allowing remote attackers to inject arbitrar...

CVE-2023-2823

CVE-2023-2823 affects SourceCodester Class Scheduling System 1.0. The vulnerability lies in the GET Parameter Handler for the file /admin/edit_subject.php, where manipulating the id parameter causes SQL injection. It is exploitable remotely, and publicized exploits exist (VDB-229597). Multiple so...

CVE-2023-2826

CVE-2023-2826 affects SourceCodester Class Scheduling System 1.0. The vulnerability is in the POST Parameter Handler, specifically the file search_teacher_result.php, where manipulating the POST parameter teacher enables cross-site scripting. Exploitation is remote and has been publicly disclosed...