CVE-2024-25208

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-25207

The CVE-2024-25207 entry concerns Barangay Population Monitoring System v1.0, which has a cross-site scripting (XSS) flaw in the Add Resident function (masterlist.php) allowing payloads in the Contact Number field to execute arbitrary scripts. Affected component: Add Resident feature in Barangay ...

Barangay Population Monitoring System Cross-Site Scripting Vulnerability

Barangay Population Monitoring System is a regional population monitoring system by the individual developer Remy Andrade. A cross-site scripting vulnerability exists in Barangay Population Monitoring System version 1.0, which stems from a cross-site scripting XSS vulnerability in the Add Residen...

PT-2024-20816 · Unknown · Barangay Population Monitoring System

Name of the Vulnerable Software and Affected Versions: Barangay Population Monitoring System version 1.0 Description: The system contains a cross-site scripting XSS vulnerability in the Add Resident function at "/barangay-population-monitoring-system/masterlist.php". This issue allows attackers t...

Barangay Population Monitoring System Cross-Site Scripting Vulnerability

Barangay Population Monitoring System is a regional population monitoring system by the individual developer Remy Andrade. A cross-site scripting vulnerability exists in Barangay Population Monitoring System version 1.0, which stems from a cross-site scripting XSS vulnerability in the Add Residen...

CVE-2024-25209

Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/delete-resident.php...

CVE-2024-25209

CVE-2024-25209 affects Barangay Population Monitoring System 1.0. The vulnerability is a SQL injection in the resident parameter of /endpoint/delete-resident.php. According to connected sources, the issue has a high impact (CVSS v3.1: 9.8, critical) with network attack vector, no user interaction...