Wangshuyan

**Name of the Vulnerable Software and Affected Versions** itsourcecode Online Voting System version 1.0 **Description** A flaw exists in itsourcecode Online Voting System that allows for SQL injection. This issue stems from manipulating the `Username` parameter within an unknown function of the `/login.php` file. The attack can be initiated remotely. The exploit is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** itsourcecode Online Voting System version 1.0 **Description** A security flaw exists in itsourcecode Online Voting System version 1.0. The issue involves SQL injection stemming from manipulation of the `ID` argument within the file `/ajax.php?action=save user`. This allows for remote exploitation. The exploit has been publicly released. The vulnerable element is an unknown function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** itsourcecode Online Voting System version 1.0 **Description** A weakness exists in itsourcecode Online Voting System version 1.0. The issue involves the manipulation of the `id`/`category` argument in the file '/index.php?page=categories', potentially leading to SQL injection. This attack can be executed remotely. The exploit has been made publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Scheduling System version 1.0 **Description** A flaw exists in the processing of the `/schedulingsystem/addcourse.php` file. Manipulation of the `corcode` argument can lead to SQL injection. This issue is remotely exploitable and the exploit has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CodeAstro Electricity Billing System version 1.0 **Description** A SQL injection issue exists in CodeAstro Electricity Billing System 1.0. The issue is located in the `/admin/bill.php` file. Manipulation of the `uid` argument can lead to SQL injection. The exploit is publicly available and may be used to launch attacks remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Simple Scheduling System version 1.0 **Description** A flaw exists in Simple Scheduling System 1.0 that could allow for SQL injection. The issue is located in the `/schedulingsystem/addroom.php` file, specifically through manipulation of the `room` argument. This can be exploited remotely. The exploit has been publicly disclosed. **Recommendations** Apply input validation and sanitization to the `room` parameter in the `/schedulingsystem/addroom.php` file.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Scheduling System version 1.0 **Description** A flaw exists in code-projects Simple Scheduling System 1.0, specifically within the /schedulingsystem/addsubject.php file. Manipulation of the `subcode` argument can lead to SQL injection. Remote exploitation is possible. The exploit has been published. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Simple Scheduling System version 1.0 **Description** A SQL injection issue exists in Simple Scheduling System version 1.0. The issue affects unknown code within the `/schedulingsystem/addfaculty.php` file. Manipulation of the `falname` argument can lead to SQL injection. The attack can be carried out remotely. The exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.