Approved changes feed: RSS · Atom

cpe:2.3:a:yoga_class_registration_system_project:yoga_class_registration_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorYoga Class Registration System Project (408faf35-0594-54e6-b75e-f24fc665e8a7)
ProductYoga Class Registration System (6fa52b7d-96d0-5b9c-a250-1635024fb66c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/dzoukr/yobo purl2cpe 2026-06-01 10:14:20.092642

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29626 vulnerable 2026-06-08 06:02:40.553263 Details available
Yoga Class Registration System 1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at /admin/login.php.
Published: 2023-04-14T00:00:00.000Z
Updated: 2025-02-06T21:14:35.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1722 vulnerable 2026-06-08 05:52:36.846859 Yoga Class Registration System 1.0 - ATO
CRITICAL (9.1)
Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.
Published: 2023-06-24T01:20:25.989Z
Updated: 2024-11-27T19:53:03.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1721 vulnerable 2026-06-08 05:52:36.846318 Yoga Class Registration System 1.0 - RCE
CRITICAL (9.1)
Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.
Published: 2023-06-23T23:02:38.582Z
Updated: 2024-11-27T19:55:10.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1395 vulnerable 2026-06-08 05:52:35.761423 SourceCodester Yoga Class Registration System list.php query cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222982 is the identifier assigned to this vulnerability.
Published: 2023-03-14T14:33:28.175Z
Updated: 2025-02-26T21:36:56.401Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1366 vulnerable 2026-06-08 05:52:35.703372 SourceCodester Yoga Class Registration System manage_category.php query sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. This affects the function query of the file admin/categories/manage_category.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222873 was assigned to this vulnerability.
Published: 2023-03-13T08:31:02.999Z
Updated: 2024-08-02T05:49:10.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0982 vulnerable 2026-06-08 05:52:33.568859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0981 vulnerable 2026-06-08 05:52:33.568339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0980 vulnerable 2026-06-08 05:52:33.567819 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.