ydnd/cve

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-3042 ↗	Apr 1, 2025Tuesday, 1 April 2025, 01:15	6.3 MEDIUM	6.5 MEDIUM
A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. This vulnerability affects unknown code of the file /student/updateprofile.php. The manipulation of the argument pic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-3041 ↗	Apr 1, 2025Tuesday, 1 April 2025, 00:15	6.3 MEDIUM	6.5 MEDIUM
A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-3040 ↗	Mar 31, 2025Monday, 31 March 2025, 23:15	6.3 MEDIUM	6.5 MEDIUM
A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_student.php. The manipulation of the argument pic leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.