Hexer

**Name of the Vulnerable Software and Affected Versions** code-projects Online Class and Exam Scheduling System version 1.0 **Description** A issue was found in the system, affecting some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the `username` argument leads to cross site scripting. The attack can be launched remotely. **Recommendations** For code-projects Online Class and Exam Scheduling System version 1.0, consider restricting access to the /Scheduling/scheduling/pages/profile.php file until a fix is available, and avoid using the `username` argument in this context to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** code-projects Shopping Portal version 1.0 **Description** A critical issue has been discovered in the Login component of the Shopping Portal, specifically affecting the /Shopping/Admin/index.php file. The manipulation of the `password` argument leads to SQL injection. This issue can be exploited remotely. **Recommendations** For code-projects Shopping Portal version 1.0, as a temporary workaround, consider restricting access to the `password` argument in the Login component until a patch is available. Additionally, restrict access to the /Shopping/Admin/index.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Hospital Management System version 1.0 **Description** A vulnerability has been found in the code-projects Hospital Management System. This issue affects an unknown part of the file /hospital/hms/admin/manage-doctors.php of the component Edit Doctor Details Page. The manipulation of the `Doctor Name` argument leads to cross-site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. **Recommendations** As a temporary workaround, consider restricting access to the `manage-doctors.php` file until a patch is available. Avoid using the `Doctor Name` argument in the affected page until the issue is resolved. Restrict access to the Edit Doctor Details Page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Hospital Management System version 1.0 **Description** A critical issue has been found in the Hospital Management System, affecting some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the `username` and `password` arguments leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For code-projects Hospital Management System version 1.0, as a temporary workaround, consider restricting access to the `/admin/index.php` file until a patch is available. Avoid using the `username` and `password` arguments in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.