2 matches found
CVE-2025-0203
Code-projects Student Management System 1.0 contains a SQL injection in the showSubject1 function (config/DbFunction.php) via the sid argument. This remote vulnerability can be triggered without authentication; multiple parameters may be affected. The issue has been publicly disclosed and is disc...
CVE-2024-12929
CVE-2024-12929 affects Code-projects Student Management System 1.0.00, with the vulnerability in /addCatController.php where manipulation of an argument size leads to SQL injection. The issue can be exploited remotely; multiple sources indicate the exploit has been disclosed publicly. Remediation...