CVE-2024-50989

A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to execute arbitrary SQL commands via the "searchdata " parameter...

CVE-2024-50990

A Reflected Cross Site Scriptng XSS vulnerability was found in /omrs/user/search.php in PHPGurukul Online Marriage Registration System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter...

PT-2024-33353 · Unknown · Madiri Salman Aashish

Name of the Vulnerable Software and Affected Versions: Madiri Salman Aashish versions n/a through 1.1 Description: The issue is related to Incorrect Privilege Assignment in the registration system, allowing Privilege Escalation when adding drop down roles. This can be exploited due to the incorre...

CVE-2024-7914

A vulnerability classified as problematic has been found in SourceCodester Yoga Class Registration System 1.0. Affected is an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the argument address leads to cross site scripting. It is possible to launch the...

CVE-2024-7914 SourceCodester Yoga Class Registration System SystemSettings.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Yoga Class Registration System 1.0. Affected is an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the argument address leads to cross site scripting. It is possible to launch the...

CVE-2024-7914 SourceCodester Yoga Class Registration System SystemSettings.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Yoga Class Registration System 1.0. Affected is an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the argument address leads to cross site scripting. It is possible to launch the...

CVE-2024-7853

A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=categories/viewcategory. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

CVE-2024-7851

A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the component Add User Handler. The manipulation leads to improper authorization. The attack can be...

CVE-2024-7853 SourceCodester Yoga Class Registration System sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=categories/viewcategory. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

CVE-2024-7853 SourceCodester Yoga Class Registration System sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=categories/viewcategory. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

CVE-2024-7853

CVE-2024-7853 affects SourceCodester Yoga Class Registration System (up to v1.0). The vulnerability is an SQL injection in the file /admin/?page=categories/view_category, triggered by manipulating the id parameter. It can be exploited remotely, and public disclosure of the exploit is noted. The c...

CVE-2024-7852

The CVE-2024-7852 entry describes a cross-site scripting (XSS) vulnerability in SourceCodester Yoga Class Registration System 1.0, caused by improper handling of the message argument in /admin/inquiries/view_inquiry.php. It is described as exploitable remotely over the network, with public exploi...

CVE-2024-7852 SourceCodester Yoga Class Registration System view_inquiry.php cross site scripting

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/inquiries/viewinquiry.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiate...

CVE-2024-7852 SourceCodester Yoga Class Registration System view_inquiry.php cross site scripting

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/inquiries/viewinquiry.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiate...

CVE-2024-7851 SourceCodester Yoga Class Registration System Add User Users.php improper authorization

A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the component Add User Handler. The manipulation leads to improper authorization. The attack can be...

CVE-2024-7851

CVE-2024-7851 affects SourceCodester Yoga Class Registration System 1.0, targeting the Add User Handler component. The vulnerability lies in the /classes/Users.php?f=save code path, where improper authorization can be exploited remotely to impact confidentiality, integrity, and availability. Publ...

CVE-2024-7851 SourceCodester Yoga Class Registration System Add User Users.php improper authorization

A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the component Add User Handler. The manipulation leads to improper authorization. The attack can be...

Yoga Class Registration System 跨站脚本漏洞

Yoga Class Registration System is a yoga class registration system by Carlo Montero, a personal developer. A cross-site scripting vulnerability exists in version 1.0 of the Yoga Class Registration System, which stems from some unknown handling of the file /admin/inquiries/viewinquiry.php, where...

Yoga Class Registration System 授权问题漏洞

Yoga Class Registration System is a yoga class registration system by the individual developer Carlo Montero. An authorization issue vulnerability exists in Yoga Class Registration System version 1.0, which stems from unknown code in the file /classes/Users.php?f=save of the component Add User...

CVE-2024-5123

A vulnerability classified as problematic has been found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file /registrar/. The manipulation of the argument searchbar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...