Code-projects College Notes Uploading System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Code-projects College Notes Uploading System: 2 record(s), with affected versions and fixes.
cpe:2.3:a:code-projects:college_notes_uploading_system

CVE-2025-15199 High · 8.8 CWE-284 Dec 29, 2025

code-projects College Notes Uploading System userprofile.php unrestricted upload

A security vulnerability has been detected in code-projects College Notes Uploading System 1.0. Impacted is an unknown function of the file /dashboard/userprofile.php. The manipulation of the argument image leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

CVE-2025-15198 Critical · 9.8 CWE-74 Dec 29, 2025

code-projects College Notes Uploading System login.php sql injection

A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affects some unknown processing of the file /login.php. Executing a manipulation of the argument User can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.