https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-36136.htmlhttps://patchthecve.com/cve/CVE-2023-36136.htmlWed, 17 Jun 2026 06:05:49 +0000MEDIUM 6.5: PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user names and passwords in clear text.https://patchthecve.com/cve/CVE-2023-36137.htmlhttps://patchthecve.com/cve/CVE-2023-36137.htmlWed, 17 Jun 2026 06:05:49 +0000MEDIUM 6.1: There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0.https://patchthecve.com/cve/CVE-2023-36135.htmlhttps://patchthecve.com/cve/CVE-2023-36135.htmlWed, 17 Jun 2026 06:05:48 +0000HIGH 7.5: User enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.https://patchthecve.com/cve/CVE-2023-36134.htmlhttps://patchthecve.com/cve/CVE-2023-36134.htmlWed, 17 Jun 2026 06:05:48 +0000CRITICAL 9.8: In PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.https://patchthecve.com/cve/CVE-2023-2826.htmlhttps://patchthecve.com/cve/CVE-2023-2826.htmlWed, 17 Jun 2026 05:53:33 +0000LOW 3.5: A vulnerability has been found in SourceCodester Class Scheduling System 1.0 and classified as problematic. This vulnerability affects unknown code of the file search_teacher_result.php of the component POST Parameter Handler. The manipulation of the argument teacher leads to cross site scripting. Thttps://patchthecve.com/cve/CVE-2023-2823.htmlhttps://patchthecve.com/cve/CVE-2023-2823.htmlWed, 17 Jun 2026 05:53:32 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Class Scheduling System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit_subject.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injectionhttps://patchthecve.com/cve/CVE-2023-2814.htmlhttps://patchthecve.com/cve/CVE-2023-2814.htmlWed, 17 Jun 2026 05:53:30 +0000LOW 3.5: A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/save_teacher.php of the component POST Parameter Handler. The manipulation of the argument Academic_Rank leads to cross site scripting. It is pos