Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:online_class_and_exam_scheduling_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductOnline Class And Exam Scheduling System (38818e77-78fe-51dd-96fd-3ce8ae7aeaf3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-44135 vulnerable 2026-06-03 15:01:18.539387 Details available
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profile_update.php. Manipulating the parameter username will cause SQL injection attacks.
Published: 2025-04-24T00:00:00.000Z
Updated: 2025-04-24T15:46:13.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44134 vulnerable 2026-06-03 15:01:18.538912 Details available
A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/class_save.php. Manipulation of parameter class will lead to SQL injection attacks.
Published: 2025-04-24T00:00:00.000Z
Updated: 2025-04-24T15:47:31.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2393 vulnerable 2026-06-03 15:00:25.404593 code-projects Online Class and Exam Scheduling System salut_del.php sql injection
MEDIUM (4.7)
A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/salut_del.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-17T20:31:04.900Z
Updated: 2025-03-18T14:33:24.704Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29568 vulnerable 2026-06-03 15:00:14.372829 Details available
A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0. The issue affects some unknown features in the file /Scheduling/pages/class_sched.php. Manipulating the class parameter can lead to cross-site scripting (XSS).
Published: 2025-04-24T00:00:00.000Z
Updated: 2025-04-24T15:14:52.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29431 vulnerable 2026-06-03 15:00:14.317669 Details available
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/department.php via the id, code, and name parameters.
Published: 2025-03-17T00:00:00.000Z
Updated: 2025-03-19T18:34:40.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29426 vulnerable 2026-06-03 15:00:14.316332 Details available
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/class.php via the id and cys parameters.
Published: 2025-03-17T00:00:00.000Z
Updated: 2025-03-19T18:26:15.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1955 vulnerable 2026-06-03 14:59:06.863346 code-projects Online Class and Exam Scheduling System profile.php cross site scripting
LOW (3.5)
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the argument username leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-04T21:00:16.408Z
Updated: 2025-03-04T21:39:21.441Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12490 vulnerable 2026-06-03 14:54:16.465771 code-projects Online Class and Exam Scheduling System teacher_save.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /pages/teacher_save.php. The manipulation of the argument salut leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2024-12-11T22:31:05.614Z
Updated: 2024-12-12T16:31:44.865Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.