CVE-2025-3589

SourceCodester Music Class Enrollment System 1.0 is affected by a SQL injection in an unknown function of /manage_class.php caused by manipulation of the ID parameter. The issue can be exploited remotely, and public exploit information exists. Connected sources reiterate the vulnerability but do ...

CVE-2024-6067

CVE-2024-6067 affects SourceCodester Music Class Enrollment System 1.0. The vulnerability is an SQL injection in the endpoint "/mces/?p=class/view_class" driven by manipulating the id parameter. It is a remote, publicly disclosed vulnerability with no user interaction required. Multiple sources r...