CVE-2022-30375: Incorrect Default Permissions

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...

PT-2022-20081

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue concerns SQL Injection via the /sns/admin/members/view member.php?id= endpoint. This allows for potential exploitation by injecting malicious SQL code through the i...

PT-2022-20080

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue allows for file deletion via the /sns/classes/Master.php?f=delete img API endpoint. This endpoint is vulnerable to exploitation, potentially leading to unauthorized...

PT-2022-11861

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description An SQL Injection issue exists via the password parameter in Login.php. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client Management...

CVE-2021-43506: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

CVE-2021-43510

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php...

CVE-2021-43509

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php...

CVE-2021-43510

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php...

PT-2022-11862

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description A SQL Injection issue exists via the id parameter in "view-service.php". This allows for potential exploitation. Recommendations For Sourcecodester Simple Client Management...

PT-2022-11863

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description A SQL Injection issue exists via the username field in the "login.php" file. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client...

CVE-2021-43509: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php...

CVE-2021-43510: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php...

CVE-2021-45435: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php...

CVE-2021-46428

A Remote Code Execution RCE vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 and previous versions via the botavatar parameter in SystemSettings.php...

PT-2022-12702

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Chatbot Application version 1.0 Description An SQL Injection issue exists via the message parameter in Master.php. This allows for potential exploitation. Recommendations For version 1.0, avoid using the message parameter...

CVE-2021-46428: Unrestricted Upload of File with Dangerous Type

A Remote Code Execution RCE vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 and previous versions via the botavatar parameter in SystemSettings.php...

CVE-2021-46427: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...

PT-2022-12703

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Chatbot Application versions 1.0 and previous versions Description A Remote Code Execution RCE issue exists, allowing for potential code execution via the bot avatar parameter in SystemSettings.php. Recommendations For...

CVE-2021-41472

SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters...

CVE-2021-41472

SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters...