CVE-2024-7080

CVE-2024-7080 affects SourceCodester Insurance Management System 1.0. The vulnerability resides in an unknown function of the file /E-Insurance/, allowing a remote attacker to trigger a direct request. Exploit details have been disclosed publicly (VDB-272365). NVD CVSS3.1 base score is 7.5 (HIGH)...

CVE-2024-7068

A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects an unknown part of the file /Script/admin/core/updatesubcategory. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-7068

A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects an unknown part of the file /Script/admin/core/updatesubcategory. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-7068

CVE-2024-7068 affects SourceCodester Insurance Management System 1.0. The vulnerability exists in an unknown part of the file /Script/admin/core/update_sub_category where manipulating the name parameter enables cross-site scripting. Remote exploitation is possible and the exploit has been disclos...

CVE-2024-7068 SourceCodester Insurance Management System update_sub_category cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects an unknown part of the file /Script/admin/core/updatesubcategory. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack...

PT-2024-38066 · Sourcecodester · Sourcecodester Insurance Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Insurance Management System version 1.0 Description: A vulnerability was found in the system, affecting an unknown functionality of the file /E-Insurance/. The manipulation leads to a direct request. The attack can be launched...

CVE-2024-7080: Direct Request

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /E-Insurance/. The manipulation leads to direct request. The attack can be launched remotely. The exploit has be...

CVE-2024-7068: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects an unknown part of the file /Script/admin/core/updatesubcategory. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack...

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system by Angel Jude Reyes Suarez, an individual developer. A security vulnerability exists in Insurance Management System version 1.0. An attacker could exploit the vulnerability to gain access to sensitive information...

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System version 1.0, which stems from an incorrect manipulation of the parameter name that can lead to cross-site scripting...

AEGON LIFE v1.0 Life Insurance Management System - Remote Code Execution Vulnerability

Exploit Title: Life Insurance Management System- Unauthenticated Remote Code Execution RCE Exploit Author: Aslam Anwar Mahimkar Category: Web application Vendor Homepage: https://projectworlds.in/ Software Link: https://projectworlds.in/life-insurance-management-system-in-php/ Version: AEGON LIFE...

CVE-2024-31502

An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/newstaff...

CVE-2024-31502

An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/newstaff...

CVE-2024-31502

The Insurance Management System (v.1.0.0 and earlier) contains a privilege escalation vulnerability. A remote attacker can exploit a permissions issue in the /admin/core/new_staff file by sending a crafted POST request . This could allow unauthorized users to gain elevated privileges within the s...

CVE-2024-31502

An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/newstaff...

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system by the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System version v.1.0.0, which stems from a permissions issue in the /admin/core/newstaff file...

CVE-2024-31502: Improper Privilege Management

An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/newstaff...

CVE-2024-31648

Cross Site Scripting XSS in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/newcategory2...

CVE-2024-31648

Cross Site Scripting XSS in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/newcategory2...

CVE-2024-31648

Cross Site Scripting XSS in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/newcategory2...