Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:class_scheduling_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductClass Scheduling System (0b44d7df-8c80-5d54-9b7e-8f7e3bdcd0b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2826 vulnerable 2026-06-08 06:02:43.145802 SourceCodester Class Scheduling System POST Parameter search_teacher_result.php cross site scripting
LOW (3.5)
A vulnerability has been found in SourceCodester Class Scheduling System 1.0 and classified as problematic. This vulnerability affects unknown code of the file search_teacher_result.php of the component POST Parameter Handler. The manipulation of the argument teacher leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229612.
Published: 2023-05-21T07:31:03.746Z
Updated: 2025-02-12T16:44:10.079Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2823 vulnerable 2026-06-08 06:02:43.140013 SourceCodester Class Scheduling System GET Parameter edit_subject.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Class Scheduling System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit_subject.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229597 was assigned to this vulnerability.
Published: 2023-05-20T07:31:04.549Z
Updated: 2024-08-02T06:33:05.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2814 vulnerable 2026-06-08 06:02:43.124365 SourceCodester Class Scheduling System POST Parameter save_teacher.php cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/save_teacher.php of the component POST Parameter Handler. The manipulation of the argument Academic_Rank leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229428.
Published: 2023-05-19T16:00:03.907Z
Updated: 2024-08-02T06:33:05.558Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.