Vulnerabilidades do Code-projects Coaching Management System

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Code-projects Coaching Management System: 2 registro(s), com versões afetadas e correções.

CVE-2026-7229 Média · 6.3 CWE-74 28/04/2026

code-projects Coaching Management System POST reply.php sql injection

A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handler. Performing a manipulation of the argument complaintreply results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

CVE-2026-7222 Baixa · 3.5 CWE-79 28/04/2026

code-projects Coaching Management System Complaint Form complaint.php cross site scripting

A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cims/modules/student/complaint.php of the component Complaint Form Page. This manipulation of the argument Complaint causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.