CVE-2025-44134
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 24, 2025
Updated: May 14, 2025
CWE ID 89
Summary
CVE-2025-44134 is a vulnerability affecting the Code-Projects Online Class and Exam Scheduling System 1.0. An issue was discovered in the file /Scheduling/pages/class_save.php, where manipulation of the class parameter can result in SQL injection attacks. This vulnerability could potentially allow unauthorized users to execute malicious SQL statements, access sensitive information, or disrupt system functionality. Users are strongly advised to apply the necessary patches or upgrades to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Code Projects