SQL Injection Vulnerability in Online Class and Exam Scheduling System by Code-Projects
CVE-2025-44135
6.5MEDIUM
Summary
A vulnerability exists in version 1.0 of the Online Class and Exam Scheduling System created by Code-Projects, specifically within the profile_update.php file. By manipulating the 'username' parameter, an attacker can execute SQL injection attacks, potentially allowing unauthorized access to the underlying database and exposure of sensitive user information. It is critical for users of this system to evaluate their security practices and apply necessary mitigations.
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved