Class And Exam Timetable Management System
Monthly
SQL injection in code-projects Class and Exam Timetable Management 1.0 allows remote attackers to manipulate database queries. The vulnerability resides in the /preview7.php endpoint, where the course_year_section or semester parameter can be abused without authentication. Public exploit code is available, but no evidence of active exploitation in the wild or CISA KEV listing exists.
SQL injection vulnerability in the Class and Exam Timetable Management System v1.0 login page allows remote, unauthenticated attackers to inject arbitrary SQL via the username and password fields in /index.php. Exploit code is publicly available, though no active exploitation has been confirmed (not in CISA KEV), and EPSS indicates a low exploitation probability.
SQL injection in code-projects Class and Exam Timetable Management 1.0 allows remote attackers to manipulate database queries. The vulnerability resides in the /preview7.php endpoint, where the course_year_section or semester parameter can be abused without authentication. Public exploit code is available, but no evidence of active exploitation in the wild or CISA KEV listing exists.
SQL injection vulnerability in the Class and Exam Timetable Management System v1.0 login page allows remote, unauthenticated attackers to inject arbitrary SQL via the username and password fields in /index.php. Exploit code is publicly available, though no active exploitation has been confirmed (not in CISA KEV), and EPSS indicates a low exploitation probability.