Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:coaching_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductCoaching Management System (d1078625-3bf3-5e5a-8b58-646f3f28f1a5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7229 vulnerable 2026-06-08 08:07:05.538756 code-projects Coaching Management System POST reply.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handler. Performing a manipulation of the argument complaintreply results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Published: 2026-04-28T05:30:17.371Z
Updated: 2026-04-28T12:33:12.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7222 vulnerable 2026-06-08 08:07:05.533413 code-projects Coaching Management System Complaint Form complaint.php cross site scripting
LOW (3.5)
A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cims/modules/student/complaint.php of the component Complaint Form Page. This manipulation of the argument Complaint causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-04-28T03:45:14.703Z
Updated: 2026-04-28T14:29:18.939Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.