CVE-2024-4726 Campcodes Legal Case Management System clients cross site scripting

A vulnerability was found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/clients. The manipulation of the argument fname leads to cross site scripting. The attack may be launched remotely. The...

CVE-2024-4726

The CVE-2024-4726 issue affects Campcodes Legal Case Management System 1.0. It involves an XSS vulnerability in the /admin/clients endpoint triggered by manipulating the f_name argument. The vulnerability is described as exploitable remotely, with public disclosure of the exploit. The connected s...

CVE-2024-4725 Campcodes Legal Case Management System client_user cross site scripting

A vulnerability has been found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientuser. The manipulation of the argument fname leads to cross site scripting. The attack can be launched...

CVE-2024-4725

The CVE-2024-4725 entry describes a cross-site scripting vulnerability in Campcodes Legal Case Management System 1.0, triggered by manipulating the f_name parameter in the /admin/client_user endpoint. The issue is exploitable remotely, and public disclosure is noted. The affected component is an ...

CVE-2024-4725 Campcodes Legal Case Management System client_user cross site scripting

A vulnerability has been found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientuser. The manipulation of the argument fname leads to cross site scripting. The attack can be launched...

CVE-2024-4724 Campcodes Legal Case Management System case-type cross site scripting

A vulnerability, which was classified as problematic, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/case-type. The manipulation of the argument casetypename leads to cross site scripting. It is possible to launch the attack remotely. T...

CVE-2024-4723 Campcodes Legal Case Management System case-status cross site scripting

A vulnerability, which was classified as problematic, has been found in Campcodes Legal Case Management System 1.0. This issue affects some unknown processing of the file /admin/case-status. The manipulation of the argument casestatus leads to cross site scripting. The attack may be initiated...

CVE-2024-4723

CVE-2024-4723 affects Campcodes Legal Case Management System 1.0. The issue is a cross-site scripting vulnerability in the /admin/case-status handler caused by manipulation of the case_status parameter. Vectors are network-based with remote exploitation indicated; exploitation details have been d...

CVE-2024-4723 Campcodes Legal Case Management System case-status cross site scripting

A vulnerability, which was classified as problematic, has been found in Campcodes Legal Case Management System 1.0. This issue affects some unknown processing of the file /admin/case-status. The manipulation of the argument casestatus leads to cross site scripting. The attack may be initiated...

CVE-2024-4681

CVE-2024-4681 concerns Campcodes Legal Case Management System 1.0. The vulnerability affects the file/roadmap area: the unknown function in the Settings Handler at /admin/general-setting allows manipulation of the favicon/logo argument, resulting in unrestricted upload. This enables a remote atta...

CVE-2024-4681 Campcodes Legal Case Management System Setting general-setting unrestricted upload

A vulnerability, which was classified as critical, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/general-setting of the component Setting Handler. The manipulation of the argument favicon/logo leads to unrestricted upload. It is possib...

Advocate Office Management System SQL注入漏洞

Advocate Office Management System is an office management system by the individual developer mayurik. A SQL injection vulnerability exists in Advocate Office Management System version 1.0, which originates from a SQL injection vulnerability in the file /control/deactivatecase.php...

ClinicCases SQL注入漏洞

ClinicCases is an open source case management system designed for law school clinics. ClinicCases version 7.3.3 suffers from a SQL injection vulnerability that allows a low-privilege attacker to execute arbitrary SQL commands via vulnerable parameters...