Code-Projects Online Class And Exam Scheduling System vulnerabilities

8 CVEs affecting Code-Projects Online Class And Exam Scheduling System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-44135, published 2025-04-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-12490, published 2024-12-12. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /pages/teacher_save.php.…
CVE-2025-2393, published 2025-03-17. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/salut_del.php. The…
CVE-2025-1955, published 2025-03-04. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file…
CVE-2025-44135, published 2025-04-24. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profile_update.php. Manipulating the parameter username will cause SQL injection attacks.
CVE-2025-44134, published 2025-04-24. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/class_save.php. Manipulation of parameter class will lead to SQL injection attacks.
CVE-2025-29568, published 2025-04-24. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0. The issue affects some unknown features in the file /Scheduling/pages/class_sched.php.…
CVE-2025-29426, published 2025-03-17. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/class.php via the id and cys parameters.
CVE-2025-29431, published 2025-03-17. Low severity, CVSS 3.2. EPSS: 0.2% chance of exploitation in the next 30 days. Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/department.php via the id, code, and name parameters.