CVE-2026-108972

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...

EUVD-2026-98313

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2026-108973 SourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2026-108973

The SourceCodester Contact Tracing System 1.0 is vulnerable to an unrestricted file upload via the move_uploaded_file function in the /classes/Users.php?f=save file. By manipulating the img/id argument, an attacker can perform a remote upload. Exploitation details have been publicly disclosed and...

EUVD-2026-98301

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...

CVE-2026-108972 SourceCodester Human Resource Management System Employee Endpoint employee.php session_start improper authentication

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...

CVE-2026-108972

A vulnerability exists in the SourceCodester Human Resource Management System 1.0 within the Employee Endpoint component. Specifically, the session_start function in the file controller/employee.php is susceptible to improper authentication when an attacker manipulates the role/pfimg/EmpId argume...

CVE-2026-108968

A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/saleshistory.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-108967

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/editcredit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to...

CVE-2026-108966

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

CVE-2026-108968 SourceCodester Performance Indicator System sales_history.php sql injection

A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/saleshistory.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-108968

A SQL injection vulnerability exists in SourceCodester Performance Indicator System 1.0 . The flaw is located within an unknown function of the /opils/staff/sales_history.php file, where manipulation of the ID argument allows for unauthorized database access. Remote exploitation is possible, and ...

EUVD-2026-98288

A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/saleshistory.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-108967

A security flaw exists in SourceCodester Performance Indicator System 1.0 within the /opils/staff/edit_credit.php file. An SQL injection vulnerability occurs due to the improper handling of the credit argument. This flaw can be triggered remotely , potentially allowing an attacker to manipulate t...

EUVD-2026-98287

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/editcredit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to...

CVE-2026-108967 SourceCodester Performance Indicator System edit_credit.php sql injection

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/editcredit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to...

CVE-2026-108965

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2026-108964

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...

CVE-2026-108966

The SourceCodester Performance Indicator System 1.0 is vulnerable to an SQL injection flaw within the /opils/staff/product.php file. The vulnerability occurs during the processing of the Category argument, which allows an attacker to initiate a remote attack. While the documents state that an exp...

CVE-2026-108966 SourceCodester Performance Indicator System product.php sql injection

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit is publicly...