CVE-2024-41332

Incorrect access control in the deletecategory function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete categories...

CVE-2024-40476

A Cross-Site Request Forgery CSRF vulnerability was found in SourceCodester Best House Rental Management System v1.0. This could lead to an attacker tricking the administrator into adding/modifying/deleting valid tenant data via a crafted HTML page, as demonstrated by a Delete Tenant action at th...

CVE-2024-40475

SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/paymentreport.php, /rental/balancereport.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php...

CVE-2024-40474

A Reflected Cross Site Scripting XSS vulnerability was found in "edit-cate.php" in SourceCodester House Rental Management System v1.0...

CVE-2024-40474

A Reflected Cross Site Scripting XSS vulnerability was found in "edit-cate.php" in SourceCodester House Rental Management System v1.0...

CVE-2024-40472

Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."...

CVE-2024-40473

A Stored Cross Site Scripting XSS vulnerability was found in "managehouses.php" in SourceCodester Best House Rental Management System v1.0. It allows remote attackers to execute arbitrary code via "Houseno" and "Description" parameter fields...

CVE-2024-40472

Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."...

CVE-2024-40476

A Cross-Site Request Forgery CSRF vulnerability was found in SourceCodester Best House Rental Management System v1.0. This could lead to an attacker tricking the administrator into adding/modifying/deleting valid tenant data via a crafted HTML page, as demonstrated by a Delete Tenant action at th...

CVE-2024-7686 SourceCodester Kortex Lite Advocate Office Management System register_case.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file registercase.php. The manipulation of the argument title/description/oppositelawyer leads to cross site scripting. It is...

CVE-2024-7686 SourceCodester Kortex Lite Advocate Office Management System register_case.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file registercase.php. The manipulation of the argument title/description/oppositelawyer leads to cross site scripting. It is...

CVE-2024-7686

The CVE-2024-7686 entry maps to SourceCodester Kortex Lite Advocate Office Management System 1.0, with a vulnerability in the register_case.php file. The issue arises from manipulating the arguments title, description, and opposite_lawyer, enabling cross-site scripting (XSS). Exploitation is remo...

CVE-2024-7685 SourceCodester Kortex Lite Advocate Office Management System adds.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file adds.php. The manipulation of the argument name/dob/email/mobile/address leads to cross site...

CVE-2024-7685

The CVE CVE-2024-7685 affects SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is the adds.php file where manipulating parameters name, dob, email, mobile, or address leads to cross-site scripting. The issue can be triggered remotely and the exploit has been publicly dis...

CVE-2024-7685 SourceCodester Kortex Lite Advocate Office Management System adds.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file adds.php. The manipulation of the argument name/dob/email/mobile/address leads to cross site...

CVE-2024-7684 SourceCodester Kortex Lite Advocate Office Management System add_act.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this vulnerability is an unknown functionality of the file addact.php. The manipulation of the argument aname leads to cross site scripting. The attack can be...

CVE-2024-7684 SourceCodester Kortex Lite Advocate Office Management System add_act.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this vulnerability is an unknown functionality of the file addact.php. The manipulation of the argument aname leads to cross site scripting. The attack can be...

CVE-2024-7684

The CVE-2024-7684 issue affects SourceCodester Kortex Lite Advocate Office Management System 1.0. The vulnerability is a cross-site scripting flaw in the add_act.php file, triggered by manipulating the aname parameter. It can be exploited remotely, and public exploits have been disclosed. The ava...

CVE-2024-7683 SourceCodester Kortex Lite Advocate Office Management System addcase_stage.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown function of the file addcasestage.php. The manipulation of the argument cname leads to cross site scripting. It is possible to launch the attack...

CVE-2024-7683 SourceCodester Kortex Lite Advocate Office Management System addcase_stage.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown function of the file addcasestage.php. The manipulation of the argument cname leads to cross site scripting. It is possible to launch the attack...