CVE-2025-1955

The affected product is code-projects Online Class and Exam Scheduling System 1.0. The vulnerability is in the file /Scheduling/scheduling/pages/profile.php, where manipulating the username parameter enables cross-site scripting. The issue can be exploited remotely, and public disclosures exist. ...

CVE-2025-2393

CVE-2025-2393 affects Code-Projects Online Class and Exam Scheduling System 1.0. The vulnerable component is the /pages/salut_del.php file, where the id parameter is unsafely used in SQL queries, enabling SQL injection. The issue is exploitable remotely and exploits have been disclosed publicly. ...