CVE-2025-3040

CVE-2025-3040 affects Project Worlds Online Time Table Generator 1.0. The vulnerability resides in the /admin/add_student.php function where manipulating the pic parameter leads to an unrestricted upload, enabling remote exploitation. Multiple sources summarize the issue as a critical vulnerabili...

CVE-2025-2662

CVE-2025-2662 concerns Project Worlds Online Time Table Generator 1.0. The vulnerability affects the file at student/studentdashboard.php where the argument course can be manipulated to trigger an SQL injection. The issue is exploitable remotely and is described as critical in multiple feeds; exp...

CVE-2025-5004

The CVE-2025-5004 entry concerns Projectworlds Online Time Table Generator 1.0, where SQL injection is possible through the c/subname parameter in /admin/add_course.php. The vulnerability is exploitable remotely and the exploit has been disclosed publicly. Multiple feeds (NVD, Red Hat, CVE List, ...

CVE-2025-5008

ProjectWorlds Online Time Table Generator v1.0 is affected by a SQL injection in /admin/add_teacher.php via the e parameter. The issue is remotely exploitable and has been disclosed publicly; it can affect confidentiality, integrity, and availability. Root cause: improper handling of user input l...

CVE-2025-3041

CVE-2025-3041 affects Project Worlds Online Time Table Generator 1.0. A vulnerability in the /admin/updatestudent.php endpoint allows unrestricted upload via the pic parameter. Exploitation can be remote and the exploit has been disclosed publicly. Connected sources indicate no public details on ...

CVE-2025-3042

CVE-2025-3042 affects Project Worlds Online Time Table Generator 1.0. The vulnerability resides in /student/updateprofile.php where manipulating the pic parameter enables unrestricted file upload, with a remote attack possible and public disclosure of the exploit. Multiple sources corroborate the...

CVE-2024-10446

CVE-2024-10446 describes a SQL injection in Project Worlds Online Time Table Generator 1.0. The vulnerability affects the function handling /timetable/admin/admindashboard.php?info=add_course, where manipulating the argument c leads to SQL injection. The issue is exploitable remotely and an explo...

CVE-2024-10447

CVE-2024-10447 affects Project Worlds Online Time Table Generator 1.0. The vulnerability resides in the endpoint /timetable/staff/staffdashboard.php?info=updateprofile, where the parameter n can be manipulated to perform an SQL injection. Exploitation is possible remotely. A temporary workaround ...

CVE-2025-2659

CVE-2025-2659 targets Project Worlds Online Time Table Generator 1.0. The vulnerability resides in /student/index.php where manipulating the parameter e causes an SQL injection, allowing remote exploitation. Multiple connected sources corroborate the issue and indicate disclosure/public availabil...

CVE-2025-5003

CVE-2025-5003 affects projectworlds Online Time Table Generator 1.0. The vulnerability is a SQL injection in the /semester_ajax.php file caused by manipulating the ID argument. It can be exploited remotely; the exploit has been disclosed publicly. Multiple sources corroborate the issue with varyi...

CVE-2025-2660

CVE-2025-2660 affects Project Worlds Online Time Table Generator 1.0. The vulnerability is an SQL injection in /admin/index.php caused by manipulating the argument e. The issue can be triggered remotely and has been disclosed publicly. Remediation guidance from multiple sources recommends restric...

CVE-2025-2661

CVE-2025-2661 affects Project Worlds Online Time Table Generator 1.0. The vulnerability is in processing the file /staff/index.php where the argument e is manipulated to cause SQL injection. Exploitation can be remote and has been publicly disclosed. No patch/version fix details are provided in t...

CVE-2024-0730

Mode C: CVE-2024-0730 affects Project Worlds Online Time Table Generator 1.0; vulnerable component is course_ajax.php where manipulation of the id parameter leads to SQL injection. The issue is exploitable remotely and has been publicly disclosed (VDB-251553). Remediation details in connected doc...

CVE-2025-70147

CVE-2025-70147 affects ProjectWorlds Online Time Table Generator 1.0. The vulnerability is missing authentication on /admin/student.php and /admin/teacher.php, enabling remote attackers to access sensitive data (including plaintext password field values) via direct HTTP GET requests without a val...

CVE-2025-70146

CVE-2025-70146 affects ProjectWorlds Online Time Table Generator 1.0. Multiple administrative action scripts under /admin/ lack authentication, enabling remote attackers to perform unauthorized admin operations (e.g., add/delete records) via direct HTTP requests without a valid session. The vulne...