CVE-2023-2689 SourceCodester Billing Management System GET Parameter editproduct.php sql injection

A vulnerability classified as critical was found in SourceCodester Billing Management System 1.0. This vulnerability affects unknown code of the file editproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated...

PT-2023-20380 · Sourcecodester · Sourcecodester Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Billing Management System version 1.0 Description: A critical issue has been found in the SourceCodester Billing Management System, affecting an unknown functionality of the file ajax service.php of the component POST Parameter...

CVE-2023-2371

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

CVE-2023-2370

A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0. Affected is an unknown function of the file admin/events/manageevent.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

CVE-2023-2369

CVE-2023-2369 affects SourceCodester Faculty Evaluation System 1.0. A vulnerability exists in the admin/manage_restriction.php endpoint where the manipulation of the id argument enables SQL injection. The issue can be exploited remotely and, according to multiple sources, the exploit is public. S...

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Resort Reservation System 1.0. Affected is an unknown function of the file registration.php. The manipulation of the argument fullname leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2023-2347

CVE-2023-2347 affects SourceCodester Service Provider Management System 1.0. The vulnerability resides in the file /admin/services/manage_service.php; manipulating the id parameter enables SQL injection and can be triggered remotely. Multiple sources (NVD, Red Hat, CNVD, etc.) report this as a cr...

CVE-2023-2210

A vulnerability has been found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/categories/viewcategory.php. The manipulation of the argument id leads to sql injection. The attack can be launched...

Cross site scripting

A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file classes/Master.php?f=savecargotype. The manipulation of the argument name leads to cross site scripting. The attack can be initiate...

Sql injection

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/students/viewdetails.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

Sql injection

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been classified as critical. Affected is an unknown function of the file projectspercurriculum.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2023-2094

A vulnerability has been found in SourceCodester Vehicle Service Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/mechanics/managemechanic.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2023-2093

CVE-2023-2093 describes a SQL injection in SourceCodester Vehicle Service Management System 1.0 via the username parameter in /classes/Login.php. The vulnerability is exploitable remotely and has been publicly disclosed; various sources corroborate the issue and assign VDB-226101. The connected d...

CVE-2023-2089

A vulnerability was found in SourceCodester Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/userprofile.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. The attack...

Sql injection

A vulnerability was found in Campcodes Online Traffic Offense Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

CVE-2023-2053

CVE-2023-2053 affects Campcodes Advanced Online Voting System 1.0. The vulnerability is a SQL injection in the /admin/candidates_row.php file driven by the id parameter, enabling remote exploitation according to public disclosures. Multiple sources confirm the flaw exists in an unknown function h...

CVE-2023-2050

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/positionsadd.php. The manipulation of the argument description leads to sql injection. The attack may be initiated remotely. The...

Sql injection

A vulnerability classified as critical was found in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ballotdown.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The explo...

CVE-2023-2048

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/votersrow.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has...