CVE-2024-8216: Improper Access Control

A vulnerability, which was classified as critical, has been found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file editPayment.php of the component Payment Handler. The manipulation of the argument reciptno leads to...

PT-2024-38875 · Nafisulbari · Insurance Management System

Name of the Vulnerable Software and Affected Versions: nafisulbari/itsourcecode Insurance Management System version 1.0 Description: A critical issue has been found in the Insurance Management System, affecting some unknown functionality of the file editPayment.php of the component Payment Handle...

PT-2024-38872 · Nafisulbari · Insurance Management System

Name of the Vulnerable Software and Affected Versions: nafisulbari/itsourcecode Insurance Management System version 1.0 Description: A vulnerability has been found in the Insurance Management System, affecting an unknown functionality of the file editClient.php. The manipulation of the AGENT ID...

CVE-2024-8209: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in nafisulbari/itsourcecode Insurance Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file addClient.php. The manipulation of the argument CLIENT ID leads to cross site scripting. The attack may be launched...

Insurance Management System 访问控制错误漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. An access control error vulnerability exists in Insurance Management System version 1.0, which stems from the manipulation of the parameter reciptno in the component payment handle...

CVE-2024-7916

A vulnerability classified as problematic was found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file addNominee.php of the component Add Nominee Page. The manipulation of the argument Nominee-Client ID leads to cro...

CVE-2024-7916

A vulnerability classified as problematic was found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file addNominee.php of the component Add Nominee Page. The manipulation of the argument Nominee-Client ID leads to cro...

CVE-2024-7916

The CVE-2024-7916 entry affects nafisulbari/itsourcecode Insurance Management System 1.0, specifically the Add Nominee Page addNominee.php. The issue arises from manipulation of the Nominee-Client ID parameter, which leads to cross-site scripting (XSS). Documents indicate the vulnerability can be...

CVE-2024-7916 nafisulbari/itsourcecode Insurance Management System Add Nominee Page addNominee.php cross site scripting

A vulnerability classified as problematic was found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file addNominee.php of the component Add Nominee Page. The manipulation of the argument Nominee-Client ID leads to cro...

PT-2024-38683

Name of the Vulnerable Software and Affected Versions nafisulbari/itsourcecode Insurance Management System version 1.0 Description A vulnerability was found in the Insurance Management System, affecting an unknown functionality of the file addNominee.php of the component Add Nominee Page. The...

itsourcecode Insurance Management System 跨站脚本漏洞

itsourcecode Insurance Management System is an insurance management system from itsourcecode open source. A cross-site scripting vulnerability exists in version 1.0 of itsourcecode Insurance Management System, which stems from an unknown function in the file addNominee.php on the Add Nominee page...

CVE-2024-7916: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file addNominee.php of the component Add Nominee Page. The manipulation of the argument Nominee-Client ID leads to cro...

CVE-2024-7225

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/updatepolicy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site...

CVE-2024-7225

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/updatepolicy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site...

CVE-2024-7225 SourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/updatepolicy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site...

CVE-2024-7225

SourceCodester Insurance Management System 1.0 contains a cross-site scripting (XSS) vulnerability in the Edit Insurance Policy Page, specifically via the pname parameter of /Script/admin/core/update_policy. The issue is exploitable remotely and is triggered by input handling on that page; multip...

Insurance Management System 跨站脚本漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A cross-site scripting vulnerability exists in Insurance Management System version 1.0, which stems from the parameter pname in the file /Script/admin/core/updatepolicy that result...

PT-2024-38185

Name of the Vulnerable Software and Affected Versions SourceCodester Insurance Management System version 1.0 Description A problematic issue has been found in the Edit Insurance Policy Page component, specifically affecting the /Script/admin/core/update policy file. The manipulation of the pname...

CVE-2024-7225: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/updatepolicy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site...

CVE-2024-7080

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /E-Insurance/. The manipulation leads to direct request. The attack can be launched remotely. The exploit has be...