CVE-2025-44135

CVE-2025-44135 affects the code-projects Online Class and Exam Scheduling System 1.0, with a SQL injection vulnerability in the /Scheduling/pages/profile_update.php endpoint. The issue stems from manipulating the username parameter without proper validation, enabling an attacker to inject SQL com...

CVE-2025-44134

Code-Projects Online Class and Exam Scheduling System 1.0 is affected. The vulnerability exists in /Scheduling/pages/class_save.php where manipulation of the class parameter enables SQL injection due to unsanitized input. CNVD/CNNVD and RH advisories corroborate the issue as an SQL injection stem...