1305 matches found
CVE-2024-7662
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. This vulnerability affects the function savepackage of the file admin/packages/managpackage.php. The manipulation leads to cross-site request forgery. The attack can be...
CVE-2024-7661
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been classified as problematic. This affects the function saveusers of the file admin/user/index.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely...
CVE-2024-7678 SourceCodester Car Driving School Management System Master.php cross site scripting
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=savepackage. The manipulation of the argument name/description/trainingduration leads to...
CVE-2024-7678
CVE-2024-7678 pertains to SourceCodester Car Driving School Management System 1.0. A cross-site scripting vulnerability resides in the public function at /classes/Master.php?f=save_package, triggered by manipulating the name/description/training_duration parameters. The issue is exploitable remot...
CVE-2024-7677
CVE-2024-7677 affects SourceCodester Car Driving School Management System 1.0. The vulnerability is in the function update_settings_info of /classes/SystemSettings.php?f=update_settings, where manipulating the contact/address argument triggers cross-site scripting. It can be exploited remotely, a...
CVE-2024-7676 Sourcecodester Car Driving School Management System Master.php save_package sql injection
A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. It has been classified as critical. Affected is the function savepackage of the file /classes/Master.php?f=savepackage. The manipulation of the argument id leads to sql injection. It is possible to launch the...
CVE-2024-7668 SourceCodester Car Driving School Management System Master.php delete_package sql injection
A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This vulnerability affects the function deletepackage of the file Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...
CVE-2024-7668
CVE-2024-7668 affects SourceCodester Car Driving School Management System 1.0, specifically the delete_package function in Master.php. The vulnerability is an SQL injection caused by unsafely handling the id parameter, allowing remote exploitation. Public disclosures exist, and multiple sources c...
CVE-2024-7667
CVE-2024-7667 affects SourceCodester Car Driving School Management System 1.0, specifically the delete_users function in User.php. The vulnerability arises from improper handling of the id argument, enabling SQL injection. Exploitation can be performed remotely, and public disclosures exist. Conn...
CVE-2024-7667 SourceCodester Car Driving School Management System User.php delete_users sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0. This affects the function deleteusers of the file User.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-7666 SourceCodester Car Driving School Management System view_package.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Car Driving School Management System 1.0. Affected by this issue is some unknown functionality of the file viewpackage.php. The manipulation of the argument id leads to sql injection. The attack may be launched...
CVE-2024-7666 SourceCodester Car Driving School Management System view_package.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Car Driving School Management System 1.0. Affected by this issue is some unknown functionality of the file viewpackage.php. The manipulation of the argument id leads to sql injection. The attack may be launched...
CVE-2024-7665 SourceCodester Car Driving School Management System manage_package.php sql injection
A vulnerability classified as critical was found in SourceCodester Car Driving School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file managepackage.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...
CVE-2024-7664
CVE-2024-7664 affects SourceCodester Car Driving School Management System 1.0. The vulnerability is an SQL injection in an unknown function within view_details.php triggered by manipulating the id parameter, allowing remote exploitation. Multiple sources confirm the issue and public disclosure of...
CVE-2024-7663 SourceCodester Car Driving School Management System manage_user.php sql injection
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit...
CVE-2024-7662 SourceCodester Car Driving School Management System manag_package.php save_package cross-site request forgery
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. This vulnerability affects the function savepackage of the file admin/packages/managpackage.php. The manipulation leads to cross-site request forgery. The attack can be...
CVE-2024-7661 SourceCodester Car Driving School Management System index.php save_users cross-site request forgery
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been classified as problematic. This affects the function saveusers of the file admin/user/index.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely...
CVE-2024-41238
A SQL injection vulnerability in /smsa/studentlogin.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter...
CVE-2024-41238
A SQL injection vulnerability in /smsa/studentlogin.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter...
CVE-2024-41239
A Stored Cross Site Scripting XSS vulnerability was found in "/smsa/addclasssubmit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "classname" parameter field...