<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: online class and exam scheduling system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-44135: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/pr</title><link>https://patchthecve.com/cve/CVE-2025-44135.html</link><guid>https://patchthecve.com/cve/CVE-2025-44135.html</guid><pubDate>Wed, 17 Jun 2026 09:24:59 +0000</pubDate><description>MEDIUM 6.5: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profile_update.php. Manipulating the parameter username will cause SQL injection attacks.</description></item><item><title>CVE-2025-44134: A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling</title><link>https://patchthecve.com/cve/CVE-2025-44134.html</link><guid>https://patchthecve.com/cve/CVE-2025-44134.html</guid><pubDate>Wed, 17 Jun 2026 09:24:59 +0000</pubDate><description>MEDIUM 6.5: A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/class_save.php. Manipulation of parameter class will lead to SQL injection attacks.</description></item><item><title>CVE-2025-29568: A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-29568.html</link><guid>https://patchthecve.com/cve/CVE-2025-29568.html</guid><pubDate>Wed, 17 Jun 2026 09:05:31 +0000</pubDate><description>MEDIUM 4.8: A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0. The issue affects some unknown features in the file /Scheduling/pages/class_sched.php. Manipulating the class parameter can lead to cross-site scripting (XSS).</description></item><item><title>CVE-2025-2393: A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling</title><link>https://patchthecve.com/cve/CVE-2025-2393.html</link><guid>https://patchthecve.com/cve/CVE-2025-2393.html</guid><pubDate>Wed, 17 Jun 2026 09:06:55 +0000</pubDate><description>MEDIUM 4.7: A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/salut_del.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The e</description></item><item><title>CVE-2025-29426: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pag</title><link>https://patchthecve.com/cve/CVE-2025-29426.html</link><guid>https://patchthecve.com/cve/CVE-2025-29426.html</guid><pubDate>Wed, 17 Jun 2026 09:05:21 +0000</pubDate><description>MEDIUM 4.6: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/class.php via the id and cys parameters.</description></item><item><title>CVE-2025-2392: A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Sched</title><link>https://patchthecve.com/cve/CVE-2025-2392.html</link><guid>https://patchthecve.com/cve/CVE-2025-2392.html</guid><pubDate>Wed, 17 Jun 2026 09:06:55 +0000</pubDate><description>MEDIUM 4.7: A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely</description></item><item><title>CVE-2025-29427: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in prof</title><link>https://patchthecve.com/cve/CVE-2025-29427.html</link><guid>https://patchthecve.com/cve/CVE-2025-29427.html</guid><pubDate>Wed, 17 Jun 2026 09:05:22 +0000</pubDate><description>MEDIUM 5.9: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in profile.php via the member_first and member_last parameters.</description></item><item><title>CVE-2025-29425: Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in exam_save.php via </title><link>https://patchthecve.com/cve/CVE-2025-29425.html</link><guid>https://patchthecve.com/cve/CVE-2025-29425.html</guid><pubDate>Wed, 17 Jun 2026 09:05:21 +0000</pubDate><description>MEDIUM 5.5: Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in exam_save.php via the parameters member and first.</description></item><item><title>CVE-2025-29430: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pag</title><link>https://patchthecve.com/cve/CVE-2025-29430.html</link><guid>https://patchthecve.com/cve/CVE-2025-29430.html</guid><pubDate>Wed, 17 Jun 2026 09:05:22 +0000</pubDate><description>MEDIUM 4.1: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/room.php via the id and rome parameters.</description></item><item><title>CVE-2025-29429: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pag</title><link>https://patchthecve.com/cve/CVE-2025-29429.html</link><guid>https://patchthecve.com/cve/CVE-2025-29429.html</guid><pubDate>Wed, 17 Jun 2026 09:05:22 +0000</pubDate><description>MEDIUM 6.1: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/program.php via the id, code, and name parameters.</description></item><item><title>CVE-2025-29431: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pag</title><link>https://patchthecve.com/cve/CVE-2025-29431.html</link><guid>https://patchthecve.com/cve/CVE-2025-29431.html</guid><pubDate>Wed, 17 Jun 2026 09:05:22 +0000</pubDate><description>LOW 3.2: Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/department.php via the id, code, and name parameters.</description></item><item><title>CVE-2025-1955: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-1955.html</link><guid>https://patchthecve.com/cve/CVE-2025-1955.html</guid><pubDate>Wed, 17 Jun 2026 08:40:25 +0000</pubDate><description>LOW 3.5: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the argument username leads to cross site scripting</description></item><item><title>CVE-2024-12490: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-12490.html</link><guid>https://patchthecve.com/cve/CVE-2024-12490.html</guid><pubDate>Wed, 17 Jun 2026 06:59:49 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /pages/teacher_save.php. The manipulation of the argument salut leads to sql injection. The attack can be initiated remotely. </description></item><item><title>CVE-2024-12489: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-12489.html</link><guid>https://patchthecve.com/cve/CVE-2024-12489.html</guid><pubDate>Wed, 17 Jun 2026 06:59:49 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/term.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploi</description></item><item><title>CVE-2024-12488: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as criti</title><link>https://patchthecve.com/cve/CVE-2024-12488.html</link><guid>https://patchthecve.com/cve/CVE-2024-12488.html</guid><pubDate>Wed, 17 Jun 2026 06:59:49 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subject_update.php. The manipulation of the argument id leads to sql injection. The attack may be launched remote</description></item><item><title>CVE-2024-12487: A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as </title><link>https://patchthecve.com/cve/CVE-2024-12487.html</link><guid>https://patchthecve.com/cve/CVE-2024-12487.html</guid><pubDate>Wed, 17 Jun 2026 06:59:48 +0000</pubDate><description>MEDIUM 6.3: A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/room_update.php. The manipulation of the argument id leads to sql injection. The attack can be launche</description></item><item><title>CVE-2024-12486: A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling</title><link>https://patchthecve.com/cve/CVE-2024-12486.html</link><guid>https://patchthecve.com/cve/CVE-2024-12486.html</guid><pubDate>Wed, 17 Jun 2026 06:59:48 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/rank_update.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The</description></item><item><title>CVE-2024-12485: A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Sched</title><link>https://patchthecve.com/cve/CVE-2024-12485.html</link><guid>https://patchthecve.com/cve/CVE-2024-12485.html</guid><pubDate>Wed, 17 Jun 2026 06:59:48 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remote</description></item><item><title>CVE-2024-12360: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-12360.html</link><guid>https://patchthecve.com/cve/CVE-2024-12360.html</guid><pubDate>Wed, 17 Jun 2026 06:59:34 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. This issue affects some unknown processing of the file class_update.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploi</description></item></channel></rss>