CVE-2024-6372

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file customeradd.php. The manipulation of the argument fullname/address/phonenumber/sex/email/city/comment leads to sql injection. It is possible to...

CVE-2024-6273

SourceCodester Clinic Queuing System 1.0 is affected. The vulnerability is in the function save_patient of patient_side.php, where manipulating Full Name/Contact/Address leads to cross-site scripting. The issue can be exploited remotely and the exploit has been publicly disclosed. No patch detail...

CVE-2024-6267

CVE-2024-6267 affects SourceCodester Service Provider Management System 1.0. The vulnerability is in the System Info Page (system_info/index.php) and arises from improper handling of the System Name/System Short Name, enabling cross-site scripting. The issue is exploitable remotely and the exploi...

CVE-2024-6196

Evidence across multiple connected documents confirms CVE-2024-6196 affects itsourcecode Banking Management System 1.0, with a SQL injection in the admin_class.php file triggered via the username parameter. The vulnerability is exploitable remotely and was disclosed publicly. Several sources labe...

CVE-2024-6192

CVE-2024-6192 affects itsourcecode Loan Management System 1.0, with an SQL injection in the login.php component of the Login Page triggered by manipulating the username parameter. Exploitation is network-visible and remote; multiple sources confirm public disclosure. Practical impact is high (una...

CVE-2024-6191

CVE-2024-6191 affects itsourcecode Student Management System 1.0, specifically the Login Page login.php. The vulnerability is a SQL injection caused by unsafely handling the user parameter, exploitable remotely. Public disclosure has occurred. The connected sources discuss remote impact and the n...

CVE-2024-6190

CVE-2024-6190 affects itsourcecode Farm Management System 1.0. The vulnerability resides in the Login component’s index.php, where the username parameter enables SQL injection. It can be exploited remotely and, per sources, the exploit has been disclosed publicly. Remediation recommendations from...

CVE-2024-6115

A vulnerability classified as critical was found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file addroom.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely...

CVE-2024-6111

A vulnerability classified as critical has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-6067

CVE-2024-6067 affects SourceCodester Music Class Enrollment System 1.0. The vulnerability is an SQL injection in the endpoint "/mces/?p=class/view_class" driven by manipulating the id parameter. It is a remote, publicly disclosed vulnerability with no user interaction required. Multiple sources r...

CVE-2024-6041

CVE-2024-6041 affects itsourcecode Gym Management System 1.0. The vulnerability is in the file manage_user.php, where improper handling of the id parameter enables SQL injection. The issue can be exploited remotely and the exploit has been disclosed publicly. Multiple connected sources corroborat...

CVE-2024-6014

The CVE-2024-6014 entry concerns itsourcecode Document Management System 1.0. Affects an unknown function in edithis.php where manipulating the id parameter triggers SQL injection, enabling remote exploitation. Multiple connected sources confirm SQLi in edithis.php with remote access and public e...

CVE-2024-5981

A vulnerability was found in itsourcecode Online House Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-37849

A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter...

CVE-2024-5896

A vulnerability, which was classified as critical, was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

CVE-2024-5775

CVE-2024-5775 affects SourceCodester Vehicle Management System 1.0, exploiting updatebill.php via the vulnerable id parameter to trigger SQL injection. The issue can be exploited remotely and, according to multiple sources, exploit/public disclosure exists (VDB-267458). Affected component is the ...

CVE-2024-5774

A vulnerability has been found in SourceCodester Stock Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attack c...

CVE-2024-5636

A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file report/index.php. The manipulation of the argument procduct leads to sql injection. The attack may be launched remotely. The...

Online Payment Hub System 1.0 SQL Injection Vulnerability

Online Payment Hub System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: Online Payment Hub System - SQLi Authentication Bypass Exploit Author: Hamit Avşar Vendor Homepage:...

CVE-2024-5396

A vulnerability classified as critical has been found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file newfaculty.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been...