Amitkolloldey vulnerabilities
Published CVEs affecting Amitkolloldey products: 2 record(s), with severity, exploitation and fixes.
CVE-2019-25320
Medium · 6.5
CWE-89 Feb 12, 2026
elearning-script 1.0 - Authentication Bypass
E Learning Script 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard without valid credentials by manipulating login parameters. Attackers can exploit the /login.php file by sending a specific payload '=''or' to bypass authentication and gain unauthorized access to the system.
CVE-2020-37035
High · 8.2
CWE-89 Jan 30, 2026
e-learning Php Script 0.1.0 - 'search' SQL Injection
e-Learning PHP Script 0.1.0 contains a SQL injection vulnerability in the search functionality that allows attackers to manipulate database queries through unvalidated user input. Attackers can inject malicious SQL code in the 'search' parameter to potentially extract, modify, or access sensitive database information.