SourceCodester Point of Sales and Inventory Management System SQL注入漏洞

SourceCodester Point of Sales and Inventory Management System is a point of sale and inventory management system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Point of Sales and Inventory Management System version 1.0, which originates from a SQL injection...

CVE-2024-7949: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetchgenderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the atta...

CVE-2024-7948: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site...

SourceCodester Online Graduate Tracer System SQL注入漏洞

SourceCodester Online Graduate Tracer System is a web-based application project developed by SourceCodester using PHP and MySQL database. Its main purpose is to provide a platform for a school to track their alumni and generate graphical reports on alumni status. SourceCodester Online Graduate...

SourceCodester Accounts Manager App 跨站脚本漏洞

SourceCodester Accounts Manager App is a web-based application from SourceCodester, Inc. It is designed to efficiently and securely manage online accounts. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Accounts Manager App, which stems from the parameter Account...

CVE-2024-7947: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-7942: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown code of the file update-leads.php. The manipulation of the argument phonenumber leads to cross site scripting. The attack can be initiated remotely. The exploi...

CVE-2024-7929

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Forum Website 1.0. This affects an unknown part of the file /registration.php of the component Signup Page. The manipulation of the argument username leads to cross site scripting. It is possible to initiate...

CVE-2024-7930

A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pms/ajax/getpackings.php. The manipulation of the argument medicineid leads to sql injection. The attack can be initiated remotel...

CVE-2024-7931

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects some unknown processing of the file /tracking/admin/viewcsprofile.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-7929

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Forum Website 1.0. This affects an unknown part of the file /registration.php of the component Signup Page. The manipulation of the argument username leads to cross site scripting. It is possible to initiate...

CVE-2024-7930

A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pms/ajax/getpackings.php. The manipulation of the argument medicineid leads to sql injection. The attack can be initiated remotel...

CVE-2024-7931

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects some unknown processing of the file /tracking/admin/viewcsprofile.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-7931 SourceCodester Online Graduate Tracer System view_csprofile.php sql injection

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects some unknown processing of the file /tracking/admin/viewcsprofile.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-7931

CVE-2024-7931 affects SourceCodester Online Graduate Tracer System v1.0. The vulnerability is a SQL injection in the file /tracking/admin/view_csprofile.php triggered by manipulating the id parameter, exploitable remotely. Several connected sources corroborate this as a critical issue with potent...

CVE-2024-7931 SourceCodester Online Graduate Tracer System view_csprofile.php sql injection

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects some unknown processing of the file /tracking/admin/viewcsprofile.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-7930 SourceCodester Clinics Patient Management System get_packings.php sql injection

A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pms/ajax/getpackings.php. The manipulation of the argument medicineid leads to sql injection. The attack can be initiated remotel...

CVE-2024-7930

SourceCodester Clinics Patient Management System 1.0 contains a SQL injection in /pms/ajax/get_packings.php via the medicine_id parameter. The vulnerability enables remote exploitation and is documented across multiple sources (NVD, CVE list, Red Hat, CNNVD, etc.), with exploit publicly disclosed...

CVE-2024-7930 SourceCodester Clinics Patient Management System get_packings.php sql injection

A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pms/ajax/getpackings.php. The manipulation of the argument medicineid leads to sql injection. The attack can be initiated remotel...

CVE-2024-7929

CVE-2024-7929 corresponds to SourceCodester Simple Forum Website 1.0. A cross-site scripting vulnerability exists in the Signup Page component, specifically the /registration.php file, due to manipulation of the username parameter. The flaw can be exploited remotely and has been disclosed publicl...