Projectworlds Online Time Table Generator 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:projectworlds:online_time_table_generator:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Projectworlds (1c49ba31-3767-5ff6-9610-c6dcb2aee835) |
|---|---|
| Product | Online Time Table Generator (df371848-ac22-5a65-98e4-db2a67050936) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-70147 |
vulnerable | 2026-06-08 07:43:16.904958 |
Details available
Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information (including plaintext password field values) via direct HTTP GET requests to these endpoints without a valid session.
Published: 2026-02-18T00:00:00.000Z
Updated: 2026-02-18T18:34:45.204Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-70146 |
vulnerable | 2026-06-08 07:43:16.904472 |
Details available
Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations (e.g.,adding records, deleting records) via direct HTTP requests to affected endpoints without a valid session.
Published: 2026-02-18T00:00:00.000Z
Updated: 2026-02-18T18:37:34.885Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5008 |
vulnerable | 2026-06-08 07:35:23.906396 |
projectworlds Online Time Table Generator add_teacher.php sql injection
HIGH (7.3)
A vulnerability was found in projectworlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_teacher.php. The manipulation of the argument e leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-05-20T23:00:12.480Z
Updated: 2025-05-21T22:45:55.825Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5004 |
vulnerable | 2026-06-08 07:35:23.894289 |
projectworlds Online Time Table Generator add_course.php sql injection
HIGH (7.3)
A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/add_course.php. The manipulation of the argument c/subname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-20T22:31:04.152Z
Updated: 2025-05-21T14:11:50.255Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5003 |
vulnerable | 2026-06-08 07:35:23.893533 |
projectworlds Online Time Table Generator semester_ajax.php sql injection
HIGH (7.3)
A vulnerability has been found in projectworlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file /semester_ajax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-20T22:00:13.596Z
Updated: 2025-05-21T14:13:26.436Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3042 |
vulnerable | 2026-06-08 07:23:07.874503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3041 |
vulnerable | 2026-06-08 07:23:07.873976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3040 |
vulnerable | 2026-06-08 07:23:07.873503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2662 |
vulnerable | 2026-06-08 07:16:58.001559 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2661 |
vulnerable | 2026-06-08 07:16:58.000908 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2660 |
vulnerable | 2026-06-08 07:16:58.000382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2659 |
vulnerable | 2026-06-08 07:16:57.999876 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10447 |
vulnerable | 2026-06-08 06:23:46.602182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10446 |
vulnerable | 2026-06-08 06:23:46.601523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0730 |
vulnerable | 2026-06-08 06:22:02.015575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.