CVE-2025-1850

Codezips College Management System 1.0 contains a SQL injection in /university.php via the book_name parameter. The issue is remotely exploitable and the exploit has been disclosed publicly. The vulnerability affects the unrelated /university.php functionality and may impact data confidentiality,...

CVE-2024-13025

Codezips College Management System 1.0 is affected by a SQL injection in /Front-end/faculty.php via manipulated book_name/book_author parameters. This allows remote exploitation (exploit disclosed). The CVSS vectors indicate high-impact (C/H, I/H, A/H) with network access and low attack complexit...