cvedb.io
CVE-2025-11107
HIGH · CVSS 7.3
EPSS exploitation probability: 0%
Published 2025-09-28T15:15:34.897 · Last modified 2026-06-17T08:29:40.070

Summary

A vulnerability was found in code-projects Simple Scheduling System 1.0. This issue affects some unknown processing of the file /schedulingsystem/addcourse.php. Performing manipulation of the argument corcode results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Affected products

fabian — simple_scheduling_system

Does this affect you?

Add your gear to cvedb and we'll alert you only when fabian ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.