CVE-2024-7810

CVE-2024-7810 affects SourceCodester Online Graduate Tracer System 1.0. The vulnerability is a SQL injection in the file /tracking/admin/view_itprofile.php, caused by manipulating the id parameter. It can be exploited remotely and, per disclosures, an exploit exists. No official patch/version upd...

CVE-2024-7799

SourceCodester Simple Online Bidding System 1.0 contains a vulnerability in the file /simple-online-bidding-system/bidding/admin/users.php that leads to improper authorization. The issue can be exploited remotely and a public exploit has been disclosed. Public remediation status is not confirmed ...

CVE-2024-7794

CVE-2024-7794 affects itsourcecode Vehicle Management System version 1.0, with a vulnerability in the mybill.php file where manipulation of the id parameter leads to SQL injection. The issue is described as exploitable remotely and the exploit has been disclosed publicly. Several connected source...

CVE-2024-7681

CVE-2024-7681 affects code-projects College Management System 1.0. The vulnerability is a SQL injection in the Login Page’s login.php, triggered by manipulating the email and password arguments. It is exploitable remotely and has been publicly disclosed. Multiple sources confirm the issue and des...

CVE-2024-7665 SourceCodester Car Driving School Management System manage_package.php sql injection

A vulnerability classified as critical was found in SourceCodester Car Driving School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file managepackage.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

PT-2024-29316 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the username parameter in the /smsa/student login.php endpoint. This can lead to data theft...

CVE-2024-7506

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /setlogo.php. The manipulation of the argument bgimg leads to unrestricted upload. The attack can be launched remotely...

CVE-2024-7500

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been rated as critical. Affected by this issue is the function savesettings of the file admin/adminclass.php. The manipulation of the argument img leads to unrestricted upload. The attack may be launched remotely. Th...

CVE-2024-7505

Affected software: Bike Delivery System 1.0. The vulnerability exists in an unknown function of the file contact_us_action.php where manipulating the name parameter leads to SQL injection. It is a remotely exploitable issue with public disclosure. Several connected sources corroborate the SQL inj...

CVE-2024-7500

CVE-2024-7500 affects itsourcecode Airline Reservation System 1.0. The vulnerable component is the save_settings function in admin/admin_class.php, where manipulation of the img argument enables unrestricted file uploads. The issue is exploitable remotely, and public disclosures exist (VDB-273626...

CVE-2024-7495 itsourcecode Laravel Accounting System HomeController.php unrestricted upload

A vulnerability, which was classified as critical, was found in itsourcecode Laravel Accounting System 1.0. This affects an unknown part of the file app/Http/Controllers/HomeController.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack...

CVE-2024-7454

The CVE-2024-7454 entry concerns SourceCodester Clinics Patient Management System 1.0, where the vulnerable component is the function patient_name in patients.php. The root cause is an SQL injection vulnerability that can be triggered remotely, potentially leading to data exposure or modification...

CVE-2024-7444

CVE-2024-7444 affects itsourcecode Ticket Reservation System 1.0, specifically the login.php of the Login Page. The vulnerability is a SQL injection caused by unsafely handling the username parameter, exploitable remotely via network, with disclosure of exploit. CVSS metrics across sources indica...

CVE-2024-7370

CVE-2024-7370 affects SourceCodester Simple Realtime Quiz System 1.0. Affected is an unknown function in the file /manage_quiz.php, where manipulating the id parameter leads to SQL injection. Exploitation can be performed remotely, and the exploit has been disclosed publicly (VDB-273354). Connect...

CVE-2024-7368

CVE-2024-7368 affects SourceCodester Simple Realtime Quiz System 1.0 in the /ajax.php?action=save_quiz endpoint. The vulnerability arises from manipulating the title parameter, enabling cross-site scripting (XSS). The issue can be exploited remotely and is publicly disclosed. Exploit details are ...

CVE-2024-7360 SourceCodester Tracking Monitoring Management System ajax.php cross-site request forgery

A vulnerability classified as problematic has been found in SourceCodester Tracking Monitoring Management System 1.0. This affects an unknown part of the file /ajax.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-7281

A vulnerability classified as critical has been found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the file /admin/index.php?page=managelot. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-7281

CVE-2024-7281 affects SourceCodester Lot Reservation Management System 1.0. The vulnerability is a SQL injection in a vulnerability in the file /admin/index.php?page=manage_lot (often described as /admin/index.php?page=manage lot) caused by improper handling of the id argument, allowing remote ex...

CVE-2024-7278

CVE-2024-7278 affects itsourcecode’s Alton Management System 1.0. The vulnerability is a SQL injection caused by improper handling of the team parameter in the file /admin/team_save.php, enabling remote exploitation. Multiple sources confirm the issue and public disclosure of the exploit. The imp...

CVE-2024-7226 SourceCodester Medicine Tracker System Password Change cross-site request forgery

A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=saveuser of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attac...