CVE-2024-8080: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Online Health Care System 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument fname with the input 1%' or 1=1 UNION SELECT...

CVE-2024-8086: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ecommerce/admin/login.php of the component Admin Login. The manipulation of the argument useremail leads to sql injection. The attack can be...

CVE-2024-8083: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /php-ocls/classes/Master.php?f=payorder. The manipulation of the argument id leads to sql injection. The attac...

Online Diagnostic Lab Management System 1.0 Arbitrary File Upload

============================================================================================================================================= | Title : Online Diagnostic Lab Management System v1.0 Remote File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...

Cab Management System 1.0 Cross Site Request Forgery

============================================================================================================================================= | Title : cab management system 1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bits ...

CVE-2024-7948

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site...

CVE-2024-7947

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-7948

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site...

CVE-2024-7949

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetchgenderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the atta...

CVE-2024-7949

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetchgenderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the atta...

CVE-2024-7949 SourceCodester Online Graduate Tracer System fetch_genderit.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetchgenderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the atta...

CVE-2024-7949 SourceCodester Online Graduate Tracer System fetch_genderit.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetchgenderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the atta...

CVE-2024-7949

CVE-2024-7949 corresponds to a SQL injection vulnerability in SourceCodester Online Graduate Tracer System up to version 1.0, triggered by manipulating an input argument in /tracking/admin/fetch_genderit.php. The issue is exploitable remotely and information about the exploit has been publicly di...

CVE-2024-7948 SourceCodester Accounts Manager App Update Account Page update-account.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site...

CVE-2024-7948

The CVE-2024-7948 entry concerns SourceCodester Accounts Manager App 1.0. The vulnerability lies in the Update Account Page’s update-account.php where manipulating parameters (Account Name, Username, Password, Link) enables cross-site scripting. Descriptions across multiple sources indicate remot...

CVE-2024-7947 SourceCodester Point of Sales and Inventory Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-7947

CVE-2024-7947 affects SourceCodester Point of Sales and Inventory Management System 1.0. The vulnerability resides in an injectable parameter within the file login.php where modifying the email argument enables an SQL injection. Exploitation can be performed remotely, and public disclosures indic...

CVE-2024-7947 SourceCodester Point of Sales and Inventory Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-7942

A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown code of the file update-leads.php. The manipulation of the argument phonenumber leads to cross site scripting. The attack can be initiated remotely. The exploi...

CVE-2024-7942

CVE-2024-7942 affects SourceCodester Leads Manager Tool 1.0, specifically the update-leads.php file. The vulnerability is a cross-site scripting (XSS) issue triggered by a manipulated phone_number argument and can be exploited remotely. The public exploit is noted in multiple references. The conn...