CVE-2024-7942

A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown code of the file update-leads.php. The manipulation of the argument phonenumber leads to cross site scripting. The attack can be initiated remotely. The exploi...

CVE-2024-7943

A vulnerability was found in itsourcecode Laravel Property Management System 1.0 and classified as critical. This issue affects the function upload of the file PropertiesController.php. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The...

CVE-2024-7944

The CVE-2024-7944 entry concerns itsourcecode Laravel Property Management System 1.0. The vulnerability affects the UpdateDocumentsRequest in DocumentsController.php, enabling unrestricted file upload and allowing a remote attacker to exploit it. Public disclosure of the exploit is indicated, und...

CVE-2024-7937

CVE-2024-7937 affects the itsourcecode Project Expense Monitoring System 1.0. The vulnerability is in the file printtransfer.php , where manipulation of the transfer_id parameter leads to SQL injection. The attack is possible remotely and exploits have been disclosed publicly. Connected sources p...

CVE-2024-7935

A vulnerability was found in itsourcecode Project Expense Monitoring System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file print.php. The manipulation of the argument mapid leads to sql injection. The attack may be launched remotely. The explo...

CVE-2024-7930

SourceCodester Clinics Patient Management System 1.0 contains a SQL injection in /pms/ajax/get_packings.php via the medicine_id parameter. The vulnerability enables remote exploitation and is documented across multiple sources (NVD, CVE list, Red Hat, CNNVD, etc.), with exploit publicly disclosed...

CVE-2024-7929

CVE-2024-7929 corresponds to SourceCodester Simple Forum Website 1.0. A cross-site scripting vulnerability exists in the Signup Page component, specifically the /registration.php file, due to manipulation of the username parameter. The flaw can be exploited remotely and has been disclosed publicl...

CVE-2024-7924 ZZCMS list.php path traversal

A vulnerability was found in ZZCMS 2023. It has been declared as critical. This vulnerability affects unknown code of the file /I/list.php. The manipulation of the argument skin leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2024-7924 ZZCMS list.php path traversal

A vulnerability was found in ZZCMS 2023. It has been declared as critical. This vulnerability affects unknown code of the file /I/list.php. The manipulation of the argument skin leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2024-7924

CVE-2024-7924 affects ZZCMS 2023. The vulnerability is in the file /I/list.php, where manipulating the skin parameter enables path traversal. The issue can be exploited remotely and, per multiple sources, the exploit has been disclosed publicly. Some sources describe it as critical; CVSS vectors ...

CVE-2024-7921

A vulnerability has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /report/ParkOutRecord/GetDataList. The manipulation leads to improper access...

CVE-2024-7919

A vulnerability, which was classified as critical, has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. This issue affects some unknown processing of the file /report/ParkChargeRecord/GetDataList. The manipulation leads to improper access controls. The...

CVE-2024-7914

CVE-2024-7914 affects SourceCodester Yoga Class Registration System 1.0. The vulnerability is in an unknown function of /php-ycrs/classes/SystemSettings.php where manipulation of the address argument leads to cross-site scripting. It is possible to exploit remotely and public exploit details have...

CVE-2024-7853 SourceCodester Yoga Class Registration System sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=categories/viewcategory. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

CVE-2024-7845

CVE-2024-7845 affects SourceCodester Online Graduate Tracer System 1.0. The vulnerability is an SQL injection in the file /tracking/admin/fetch_it.php triggered by manipulation of the request argument. It can be exploited remotely and has been disclosed publicly. Several sources consistently desc...

CVE-2024-7844

A vulnerability has been found in SourceCodester Online Graduate Tracer System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /tracking/admin/addacc.php. The manipulation of the argument name/user/position leads to cross site scripting. T...

CVE-2024-7844

A vulnerability has been found in SourceCodester Online Graduate Tracer System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /tracking/admin/addacc.php. The manipulation of the argument name/user/position leads to cross site scripting. T...

CVE-2024-7843

CVE-2024-7843 affects SourceCodester Online Graduate Tracer System 1.0, with the vulnerability residing in the file /tracking/admin/exportcs.php . The issue enables information disclosure through an unknown function, and it is reported that the attack can be launched remotely . Multiple connected...

CVE-2024-7842

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Graduate Tracer System 1.0. This issue affects some unknown processing of the file /tracking/admin/exportit.php. The manipulation leads to information disclosure. The attack may be initiated remotely. Th...

CVE-2024-7833

A vulnerability was found in D-Link DI-8100 16.07. It has been classified as critical. This affects the function upgradefilterasp of the file upgradefilter.asp. The manipulation of the argument path leads to command injection. It is possible to initiate the attack remotely. The exploit has been...