CVE-2025-29426

CVE-2025-29426 affects Code-projects Online Class and Exam Scheduling System V1.0. The vulnerability is a cross-site scripting (XSS) flaw in /pages/class.php exploitable via the id and cys parameters. Public descriptions consistently reference input handling deficiencies (lack of proper filtering...

CVE-2025-1955

The affected product is code-projects Online Class and Exam Scheduling System 1.0. The vulnerability is in the file /Scheduling/scheduling/pages/profile.php, where manipulating the username parameter enables cross-site scripting. The issue can be exploited remotely, and public disclosures exist. ...

CVE-2025-29431

Code-projects Online Class and Exam Scheduling System V1.0 is affected by a cross-site scripting (XSS) vulnerability in /pages/department.php, exploitable via the id, code, and name parameters. The issue stems from insufficient input handling (lack of proper filtering/escaping), allowing injected...

CVE-2025-29568

CVE-2025-29568 concerns the Online Class and Exam Scheduling System 1.0. Multiple connected sources (CNVD-2026-00706, CNNVD-202504-3544, RH-CVE, NVD) describe a cross-site scripting (XSS) vulnerability in the file /Scheduling/pages/class_sched.php triggered by manipulating the class parameter. CN...

CVE-2025-2393

CVE-2025-2393 affects Code-Projects Online Class and Exam Scheduling System 1.0. The vulnerable component is the /pages/salut_del.php file, where the id parameter is unsafely used in SQL queries, enabling SQL injection. The issue is exploitable remotely and exploits have been disclosed publicly. ...

CVE-2025-44135

CVE-2025-44135 affects the code-projects Online Class and Exam Scheduling System 1.0, with a SQL injection vulnerability in the /Scheduling/pages/profile_update.php endpoint. The issue stems from manipulating the username parameter without proper validation, enabling an attacker to inject SQL com...

CVE-2025-44134

Code-Projects Online Class and Exam Scheduling System 1.0 is affected. The vulnerability exists in /Scheduling/pages/class_save.php where manipulation of the class parameter enables SQL injection due to unsanitized input. CNVD/CNNVD and RH advisories corroborate the issue as an SQL injection stem...

CVE-2024-12490

CVE-2024-12490 affects the code-projects Online Class and Exam Scheduling System 1.0. The vulnerability exists in the /pages/teacher_save.php file, where the salut parameter can be manipulated to perform SQL injection. Exploitation is remote and has been disclosed publicly. Multiple connected rep...