EUVD-2026-85344

Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculationformula values reference whitelisted methods before passing them to frappe.call. Accounts Managers can supply arbitrary dotted Python paths to invoke non-whitelisted internal server-side methods and...

EUVD-2024-48788

Malicious code in bioql PyPI...

EUVD-2024-48624

Malicious code in bioql PyPI...

EUVD-2024-48625

Malicious code in bioql PyPI...

CVE-2024-7948

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site...

CVE-2024-7749

A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoint/add-account.php. The manipulation of the argument accountname leads to cross site scripting. It is possible to launch the attack...

CVE-2024-7748

A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the file /endpoint/delete-account.php. The manipulation of the argument account leads to sql injection. The attack may be initiated remotely...

Application Accounts Manager 1.0 Cross Site Scripting

Application Accounts Manager version 1.0 suffers from a persistent cross site scripting vulnerability. Exploit Title: Stored XSS on application-accounts-manager 1.0 Date: 03.14.2025 Exploit Author: Ümit AYAZ Vendor Homepage: www.sourcecodester.com Software Link:...

CVE-2024-7948

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site...

CVE-2024-7948

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site...

CVE-2024-7948 SourceCodester Accounts Manager App Update Account Page update-account.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site...

CVE-2024-7948

The CVE-2024-7948 entry concerns SourceCodester Accounts Manager App 1.0. The vulnerability lies in the Update Account Page’s update-account.php where manipulating parameters (Account Name, Username, Password, Link) enables cross-site scripting. Descriptions across multiple sources indicate remot...

SourceCodester Accounts Manager App 跨站脚本漏洞

SourceCodester Accounts Manager App is a web-based application from SourceCodester, Inc. It is designed to efficiently and securely manage online accounts. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Accounts Manager App, which stems from the parameter Account...

PT-2024-38713 · Sourcecodester · Sourcecodester Accounts Manager App

Name of the Vulnerable Software and Affected Versions: SourceCodester Accounts Manager App version 1.0 Description: A vulnerability was found in the SourceCodester Accounts Manager App, affecting the file update-account.php of the component Update Account Page. The manipulation of the Account Nam...

CVE-2024-7749

A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoint/add-account.php. The manipulation of the argument accountname leads to cross site scripting. It is possible to launch the attack...

CVE-2024-7748

A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the file /endpoint/delete-account.php. The manipulation of the argument account leads to sql injection. The attack may be initiated remotely...

CVE-2024-7749

A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoint/add-account.php. The manipulation of the argument accountname leads to cross site scripting. It is possible to launch the attack...

CVE-2024-7748

A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the file /endpoint/delete-account.php. The manipulation of the argument account leads to sql injection. The attack may be initiated remotely...

CVE-2024-7749

CVE-2024-7749 affects SourceCodester Accounts Manager App 1.0. The vulnerable component is the file /endpoint/add-account.php, where manipulating the account_name argument enables cross-site scripting. The issue can be exploited remotely and has public exploits disclosed. Multiple connected sourc...

CVE-2024-7749 SourceCodester Accounts Manager App add-account.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoint/add-account.php. The manipulation of the argument accountname leads to cross site scripting. It is possible to launch the attack...