code-projects Online Class and Exam Scheduling System
0 remedies
cpe:2.3:a:code-projects:online_class_and_exam_scheduling_system:*:*:*:*:*:*:*
0 remedies
- 1.0
Code-Projects Online Class and Exam Scheduling System SQL Injection Vulnerability in Profile Update Page
Vulnerability
A SQL injection vulnerability has been identified in Code-Projects Online Class and Exam Scheduling System version 1.0. The issue arises in the profile update page, where the username parameter can be manipulated to execute unauthorized SQL commands.
Impact
Exploitation of this vulnerability allows for SQL injection, where an attacker can interfere with the application's database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.3impact
2.5exploitability
9.1remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
10.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.