CVE-2024-9808

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=products/viewproduct. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-9809

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is the function deleteproduct of the file /classes/Master.php?f=deleteproduct. The manipulation of the argument id leads to sql injection. The attack can be launch...

CVE-2024-9810

A vulnerability was found in SourceCodester Record Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file sort2user.php. The manipulation of the argument qualification leads to cross site scripting. The attack may be launched...

CVE-2024-9810 SourceCodester Record Management System sort2_user.php cross site scripting

A vulnerability was found in SourceCodester Record Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file sort2user.php. The manipulation of the argument qualification leads to cross site scripting. The attack may be launched...

CVE-2024-9810

CVE-2024-9810 affects SourceCodester Record Management System 1.0. The vulnerability resides in the file sort2_user.php where manipulation of the qualification parameter enables cross-site scripting. The issue can be exploited remotely, and public exploit information exists. Documents provide no ...

CVE-2024-9809 SourceCodester Online Eyewear Shop Master.php delete_product sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is the function deleteproduct of the file /classes/Master.php?f=deleteproduct. The manipulation of the argument id leads to sql injection. The attack can be launch...

CVE-2024-9809 SourceCodester Online Eyewear Shop Master.php delete_product sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is the function deleteproduct of the file /classes/Master.php?f=deleteproduct. The manipulation of the argument id leads to sql injection. The attack can be launch...

CVE-2024-9809

CVE-2024-9809 affects SourceCodester Online Eyewear Shop 1.0, specifically the delete_product function in /classes/Master.php?f=delete_product. The vulnerability arises from unsafely handling the id parameter, enabling SQL injection that can be exploited remotely. Public exploit disclosures exist...

CVE-2024-9808 SourceCodester Online Eyewear Shop sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=products/viewproduct. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-9808 SourceCodester Online Eyewear Shop sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=products/viewproduct. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-9808

CVE-2024-9808 affects SourceCodester Online Eyewear Shop v1.0. The vulnerability is a SQL injection in an unknown function of the file /admin/?page=products/view_product via the id argument, allowing remote exploitation. Multiple sources confirm a public exploit/disclosure. Some reports (PT-2024-...

CVE-2024-9799

A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument...

CVE-2024-9799

A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument...

CVE-2024-9799 SourceCodester Profile Registration without Reload Refresh add.php cross site scripting

A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument...

CVE-2024-9799 SourceCodester Profile Registration without Reload Refresh add.php cross site scripting

A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument...

CVE-2024-9799

CVE-2024-9799 affects SourceCodester Profile Registration without Reload Refresh 1.0. The vulnerable component is add.php, where parameters such as email_address, address, company_name, job_title, and jobDescription can be manipulated to trigger cross-site scripting. The issue can be exploited re...

SourceCodester Profile Registration without Reload Refresh 跨站脚本漏洞

SourceCodester Profile Registration without Reload Refresh is a SourceCodester open source application. A cross-site scripting vulnerability exists in SourceCodester Profile Registration without Reload Refresh version 1.0, which originates in the file add.php with the parameters...

SourceCodester Online Veterinary Appointment System SQL注入漏洞

SourceCodester Online Veterinary Appointment System is a SourceCodester open source online veterinary appointment system. A SQL injection vulnerability exists in SourceCodester Online Veterinary Appointment System version 1.0, which originates from the parameter id of the file...

SourceCodester Record Management System 跨站脚本漏洞

SourceCodester Record Management System is a SourceCodester open source record management system. A cross-site scripting vulnerability exists in SourceCodester Record Management System version 1.0, which stems from the parameter qualification in the file sort2user.php that can lead to cross-site...

CVE-2024-46293

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Incorrect Access Control. There is a lack of authorization checks for admin operations. Specifically, an attacker can perform admin-level actions without possessing a valid session token. The application does not verify whether t...