200 matches found
CVE-2024-6216
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file add-users.php. The manipulation of the argument contact leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
Food Ordering Management System SQL Injection Vulnerability
Food Ordering Management System is a food ordering management system by Carlo Montero, an individual developer. It provides an online platform to order food from a restaurant or fast food chain. A SQL injection vulnerability exists in Food Ordering Management System version 1.0, which stems from...
PT-2024-37458 · Unknown · Sourcecodester Food Ordering Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Food Ordering Management System. The issue is related to an unknown function of the file add-users.php, wher...
DEBIAN-CVE-2024-36399
Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser. The users permission to add users to a project only get checked on the URL parameter projectid. If the user is authorized to add users to...
CVE-2024-33303
SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" under Add Users...
CVE-2024-33302
SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting XSS via "Middle Name" under Add Users...
CVE-2024-33303
SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" under Add Users...
CVE-2024-33302
SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting XSS via "Middle Name" under Add Users...
CVE-2024-33303
SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" under Add Users...
CVE-2024-33302
SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting XSS via "Middle Name" under Add Users...
CVE-2024-33303
SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" under Add Users...
PT-2024-25193 · Sourcecodester · Sourcecodester Product Show Room
Name of the Vulnerable Software and Affected Versions: SourceCodester Product Show Room version 1.0 Description: The issue concerns Cross Site Scripting XSS via the First Name field under Add Users. This allows for potential malicious script injection. Recommendations: For SourceCodester Product...
CVE-2024-33303: Improper Neutralization of Input During Web Page Generation
SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" under Add Users...
CVE-2024-33302
SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting XSS via "Middle Name" under Add Users...
CVE-2024-33303
The SourceCodester Product Show Room 1.0 (and prior versions) is vulnerable to a Cross-Site Scripting (XSS) attack. The root cause is the improper neutralization of input during web page generation, specifically via the "First Name" parameter located under the Add Users feature. This flaw allows ...
PT-2024-25192 · Sourcecodester · Product Show Room
Name of the Vulnerable Software and Affected Versions: SourceCodester Product Show Room versions 1.0 and before Description: The issue is related to Cross Site Scripting XSS via the Middle Name field under Add Users. This allows for potential malicious script injection. Recommendations: For...
CVE-2024-33302: Improper Neutralization of Input During Web Page Generation
SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting XSS via "Middle Name" under Add Users...
CVE-2024-33302
SourceCodester Product Show Room version 1.0 and before is vulnerable to Cross-Site Scripting (XSS) . The vulnerability is triggered via the Middle Name parameter within the Add Users section, where improper neutralization of input during web page generation allows for potential malicious script ...