CVE-2024-9323

The CVE-2024-9323 entry concerns SourceCodester Inventory Management System 1.0, where an unknown function in /app/action/add_staff.php is vulnerable to cross-site scripting. The issue can be triggered remotely and the exploit has been disclosed publicly. Multiple connected sources corroborate th...

CVE-2024-9321

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/viewdetails.php. The manipulation of the argument id leads to improper access controls. The attack may be initiated...

CVE-2024-9321

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/viewdetails.php. The manipulation of the argument id leads to improper access controls. The attack may be initiated...

CVE-2024-9321 SourceCodester Online Railway Reservation System view_details.php access control

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/viewdetails.php. The manipulation of the argument id leads to improper access controls. The attack may be initiated...

CVE-2024-9321

CVE-2024-9321 affects SourceCodester Online Railway Reservation System 1.0. The vulnerability is in the /admin/inquiries/view_details.php page where manipulating the id parameter leads to improper access controls, with remote exploitation possible. According to the supplied sources, the issue has...

CVE-2024-9321 SourceCodester Online Railway Reservation System view_details.php access control

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/viewdetails.php. The manipulation of the argument id leads to improper access controls. The attack may be initiated...

CVE-2024-9320

A vulnerability has been found in SourceCodester Online Timesheet App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /endpoint/add-timesheet.php of the component Add Timesheet Form. The manipulation of the argument day/task leads to cross site scripting. Th...

CVE-2024-9320

A vulnerability has been found in SourceCodester Online Timesheet App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /endpoint/add-timesheet.php of the component Add Timesheet Form. The manipulation of the argument day/task leads to cross site scripting. Th...

CVE-2024-9319

A vulnerability, which was classified as critical, was found in SourceCodester Online Timesheet App 1.0. This affects an unknown part of the file /endpoint/delete-timesheet.php. The manipulation of the argument timesheet leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-9320 SourceCodester Online Timesheet App Add Timesheet Form add-timesheet.php cross site scripting

A vulnerability has been found in SourceCodester Online Timesheet App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /endpoint/add-timesheet.php of the component Add Timesheet Form. The manipulation of the argument day/task leads to cross site scripting. Th...

CVE-2024-9320

SourceCodester Online Timesheet App 1.0 contains a cross-site scripting (XSS) vulnerability in the Add Timesheet Form component, due to manipulation of the day/task parameter in /endpoint/add-timesheet.php. The issue can be triggered remotely; public exploit details are referenced in multiple sou...

PT-2024-39577 · Sourcecodester · Sourcecodester Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Advocate Office Management System version 1.0 Description: A critical issue affects the processing of the file /control/edit client.php, where the manipulation of the id argument leads to SQL injection. The attack can be...

PT-2024-39572 · Sourcecodester · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A vulnerability was found in the system, affecting an unknown functionality of the file /app/action/add staff.php. The manipulation leads to cross site scripting. The attack...

CVE-2024-9323: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/action/addstaff.php. The manipulation leads to cross site scripting. The attack can be launched remotely. T...

CVE-2024-9320: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Online Timesheet App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /endpoint/add-timesheet.php of the component Add Timesheet Form. The manipulation of the argument day/task leads to cross site scripting. Th...

CVE-2024-9321: Improper Access Control

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/viewdetails.php. The manipulation of the argument id leads to improper access controls. The attack may be initiated...

PT-2024-39569 · Sourcecodester · Sourcecodester Online Timesheet App

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Timesheet App version 1.0 Description: A problematic issue has been found in the Add Timesheet Form component, specifically affecting the /endpoint/add-timesheet.php file. The manipulation of the day/task argument leads ...

CVE-2024-9328: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /control/editclient.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-9319: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Online Timesheet App 1.0. This affects an unknown part of the file /endpoint/delete-timesheet.php. The manipulation of the argument timesheet leads to sql injection. It is possible to initiate the attack remotely. The...

PT-2024-39570 · Sourcecodester · Sourcecodester Online Railway Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Railway Reservation System version 1.0 Description: A critical issue affects the processing of the file /admin/inquiries/view details.php, where the manipulation of the id argument leads to improper access controls. The...