PT-2024-38154

Name of the Vulnerable Software and Affected Versions itsourcecode Society Management System version 1.0 Description A critical issue was found in the itsourcecode Society Management System, affecting an unknown part of the file /admin/student.php. The manipulation of the image argument leads to...

PT-2024-37872

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Management System version 1.0 Description A critical issue has been found in the system, affecting the processing of the file /add-students.php. The manipulation of the image argument leads to unrestricted upload...

CVE-2024-6801: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0. This issue affects some unknown processing of the file /add-students.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated...

CVE-2024-6008: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Online Book Store up to 1.0. Affected is an unknown function of the file /editbook.php. The manipulation of the argument image leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2024-37117 · Itsourcecode · Itsourcecode Bakery Online Ordering System

Name of the Vulnerable Software and Affected Versions: itsourcecode Bakery Online Ordering System version 1.0 Description: A critical issue has been found in the itsourcecode Bakery Online Ordering System, affecting an unknown function of the file /admin/modules/product/controller.php?action=add...

PT-2024-37110

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Discussion Forum version 1.0 Description: A critical issue has been found in the software, affecting an unknown function of the file /members/poster.php. The manipulation of the image argument leads to unrestricted upload...

CVE-2023-1734: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected is an unknown function of the file admin/products/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the...

CVE-2022-2212: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

PT-2022-15255

Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0 Description A critical issue was found in the system, affecting an unknown function of the /card/index.php component. The manipulation of the image argument leads to unrestricted upload. Thi...

CVE-2006-2699: Undefined Security Weakness

Cross-site scripting XSS vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a show action...