493 matches found
Student Study Center Desk Management System 路径遍历漏洞
Student Study Center Desk Management System is a student study center desk management system. A path traversal vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates in the component POST Parameter Handler's Master.php? and results in path...
Canteen Management System SQL注入漏洞
Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Canteen Management System version 1.0, which stems from a problem in the file createuser.php, where manipulation of the parameter uemail can lead to...
CVE-2023-1392
A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is the function savemenu. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public a...
Yoga Class Registration System 跨站脚本漏洞
Yoga Class Registration System is a yoga class registration system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Yoga Class Registration System, which stems from cross-site scripting due to misuse of the parameter name...
SourceCodester Friendly Island Pizza Website and Ordering System SQL注入漏洞
SourceCodester Friendly Island Pizza Website and Ordering System is the Island Pizza website and ordering system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Friendly Island Pizza Website and Ordering System due to unknown code in the file paypalsuccess.php in the...
Simple Bakery Shop Management SQL注入漏洞
Simple Bakery Shop Management is a bakery store management system. A SQL injection vulnerability exists in SourceCodester Simple Bakery Shop Management System version 1.0, which stems from a SQL injection vulnerability in the parameter sername/password...
PT-2023-16926 · Sourcecodester · Sourcecodester Gadget Works Online Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Gadget Works Online Ordering System version 1.0 Description: A vulnerability has been found in the SourceCodester Gadget Works Online Ordering System, affecting the component Add New User. The issue is related to the manipulati...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system for janobe individual developers. It can be used for any small business. A SQL injection vulnerability exists in SourceCodester Gadget Works Online Ordering System version 1.0, which stems from a problem in the file...
Online Ordering System 跨站脚本漏洞
Online Ordering System is a multi-store ordering system for janobe individual developers. It can be used for any small business. A cross-site scripting vulnerability exists in SourceCodester Gadget Works Online Ordering System version 1.0, which stems from a problem with the file...
PT-2023-16854 · Unknown +1 · Jquery-Validation +1
Name of the Vulnerable Software and Affected Versions: SourceCodester Phone Shop Sales Managements System version 1.0 Description: A problematic vulnerability was found in the CAPTCHA Handler component, specifically affecting unknown code of the file...
PT-2023-16841 · Sourcecodester · Health Center Patient Record Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A critical issue was found in the login.php file, where the manipulation of the username argument leads to sql injection. This issue can be exploited...
Computer Parts Sales and Inventory System 跨站脚本漏洞
Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Computer Parts Sales and Inventory System version 1.0, which stems from the fact that manipulation of...
SourceCodester Computer Parts Sales and Inventory System 跨站脚本漏洞
Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Computer Parts Sales and Inventory System version 1.0, which stems from unknown problematic code in th...
Music Gallery Site SQL注入漏洞
Music Gallery Site is a music gallery site by Carlo Montero, a personal developer. A SQL injection vulnerability exists in SourceCodester Music Gallery Site version 1.0 due to some unknown processing in the file viewcategory.php, which results in an sql injection via the parameter id...
PT-2023-1563 · Sourcecodester · Dental Clinic Appointment Reservation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Dental Clinic Appointment Reservation System version 1.0 Description: A vulnerability was found in the Dental Clinic Appointment Reservation System, affecting the file /APR/signup.php, specifically the POST Parameter Handler...
Online Pet Shop We App 跨站脚本漏洞
Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in SourceCodester Online Pet Shop We App version 1.0, which stems from the fact that incorrect manipulation of the parameter oid can lead to cross-site...
Alphaware Simple E-Commerce System 访问控制错误漏洞
Alphaware Simple E-Commerce System is an e-commerce system by razormist individual developers. An Access Control Error vulnerability exists in SourceCodester Alphaware Simple E-Commerce System version 1.0, which stems from incorrect manipulation of the parameter amount resulting in incorrect acce...
Medical Certificate Generator App 跨站脚本漏洞
The Medical Certificate Generator App is a simple web application for medical clinics. A cross-site scripting vulnerability exists in SourceCodester Medical Certificate Generator App version 1.0, which stems from incorrect manipulation of a special parameter that results in cross-site scripting...
PT-2023-16669 · Sourcecodester · Sourcecodester Online Pizza Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A problematic issue has been found in the processing of the file "admin/ajax.php?action=save user", leading to cross-site request forgery. The attack can be initiated...
Yoga Class Registration System SQL注入漏洞
Yoga Class Registration System is a yoga class registration system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Yoga Class Registration System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...