CVE 6.9 MEDIUM

code-projects Simple Scheduling System addcourse.php sql injection_CVE-2025-11107

6.9 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was found in code-projects Simple Scheduling System 1.0. This issue affects some unknown processing of the file /schedulingsystem/addcourse.php. Performing manipulation of the argument corcode results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Basic Information

ID CVE-2025-11107
Source VulDB
Published Sep 28, 2025 at 14:32

Affected Product

Vendor code-projects
Product Simple Scheduling System
Version 1.0
Affected Versions code-projects Simple Scheduling System 1.0

CWE Classification

References

πŸ’­ Join the Security Discussion

πŸ”’ Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.