Description
A vulnerability was found in code-projects Simple Scheduling System 1.0. This issue affects some unknown processing of the file /schedulingsystem/addcourse.php. Performing manipulation of the argument corcode results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| code-projects | Simple Scheduling System | 1.0 | — |
References
- VDB-326188 | code-projects Simple Scheduling System addcourse.php sql injection vdb-entry technical-description
- VDB-326188 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #662444 | code-projects Simple Scheduling System V1.0 SQL Injection third-party-advisory
- https://github.com/WANGshuyan2025/cve/issues/4 exploit issue-tracking
- https://code-projects.org/ product