CVE-2025-44135
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 24, 2025
Updated: May 14, 2025
CWE ID 89
Summary
CVE-2025-44135 is a newly discovered vulnerability affecting the code-projects Online Class and Exam Scheduling System 1.0. The issue lies in the file /Scheduling/pages/profile_update.php, where an SQL injection attack can be executed by manipulating the username parameter. An attacker could exploit this vulnerability to gain unauthorized access to sensitive data or even take control of the system. This weakness underscores the importance of input validation and sanitization in web application development to prevent SQL injection attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Code Projects