CVE-2025-29426

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) in the /pages/class.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data within the id and cys parameters, allowing an attacker to inject and ex...

CVE-2025-29431

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) within the /pages/department.php endpoint. The root cause is the incorrect manipulation and lack of effective filtering or escaping of user-supplied data in the id, code, and name parameters...

CVE-2025-1955

The affected product is code-projects Online Class and Exam Scheduling System 1.0. The vulnerability is in the file /Scheduling/scheduling/pages/profile.php, where manipulating the username parameter enables cross-site scripting. The issue can be exploited remotely, and public disclosures exist. ...

CVE-2025-44135

The code-projects Online Class and Exam Scheduling System version 1.0 is vulnerable to an SQL injection attack in the /Scheduling/pages/profile_update.php endpoint. The root cause is the lack of validation for the username parameter against externally entered SQL statements. An attacker can explo...

CVE-2025-2393

CVE-2025-2393 affects Code-Projects Online Class and Exam Scheduling System 1.0. The vulnerable component is the /pages/salut_del.php file, where the id parameter is unsafely used in SQL queries, enabling SQL injection. The issue is exploitable remotely and exploits have been disclosed publicly. ...

CVE-2025-29568

The code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to cross-site scripting (XSS) due to a lack of proper validation of the class parameter within the /Scheduling/pages/class_sched.php file. An attacker manipulating this parameter can execute malicious scripts in the conte...

CVE-2024-12490

CVE-2024-12490 affects the code-projects Online Class and Exam Scheduling System 1.0. The vulnerability exists in the /pages/teacher_save.php file, where the salut parameter can be manipulated to perform SQL injection. Exploitation is remote and has been disclosed publicly. Multiple connected rep...

CVE-2025-44134

The Code-Projects Online Class and Exam Scheduling System 1.0 is vulnerable to a SQL injection attack in the file /Scheduling/pages/class_save.php . The root cause is the lack of validation for the class parameter against externally entered SQL statements. An attacker can exploit this flaw to exe...