Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:assessment_management:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductAssessment Management (899f0e16-c8af-52f9-acf3-7bd3ddf7b56e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-93977 vulnerable 2026-10-13 12:28:56.222222 code-projects Assessment Management add-single-mark.php cross site scripting
LOW (3.5)
A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown functionality of the file lecturer/add-single-mark.php. This manipulation of the argument mark causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Published: 2026-09-20T10:15:10.200Z
Updated: 2026-09-24T11:48:43.840Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-93976 vulnerable 2026-10-13 12:28:56.069560 code-projects Assessment Management add-user.php cross site scripting
LOW (2.4)
A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The manipulation of the argument level results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used.
Published: 2026-09-20T10:00:09.562Z
Updated: 2026-09-21T14:40:12.136Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-93975 vulnerable 2026-10-13 12:28:55.921912 code-projects Assessment Management User Editing edit-user.php cross site scripting
LOW (2.4)
A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file admin/edit-user.php of the component User Editing. The manipulation of the argument name/sname/email/username/password/id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-09-20T09:45:08.651Z
Updated: 2026-09-21T20:04:54.589Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14658 vulnerable 2026-07-29 00:26:17.444313 code-projects Assessment Management marking-scheme.php sql injection
MEDIUM (6.3)
A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/marking-scheme.php. The manipulation of the argument smarksrange[] results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Published: 2026-07-04T22:00:09.063Z
Updated: 2026-07-06T13:43:09.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14657 vulnerable 2026-07-29 00:26:17.444173 code-projects Assessment Management Database Query marking-scheme.php sql injection
MEDIUM (6.3)
A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the component Database Query Handler. This manipulation of the argument squestions[] causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
Published: 2026-07-04T21:45:07.870Z
Updated: 2026-07-06T16:19:01.343Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14656 vulnerable 2026-07-29 00:26:17.443906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14655 vulnerable 2026-07-29 00:26:17.443696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15196 vulnerable 2026-06-08 07:06:35.862907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15195 vulnerable 2026-06-08 07:06:35.861497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.