CVE-2022-37151

Technical details about CVE-2022-37151 are not provided in the connected documents. Monitor for updates from vendor advisories and security bulletins to obtain affected components, impact, and remediation.

CVE-2022-37151

There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...

Cross site scripting

A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /manage-apartment.php. The manipulation of the argument Apartment Number with the input alert1 leads to cross site scripting...

Sql injection

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument username with the input ' AND SELECT 4955 FROM SELECTSLEEP5RSzF AND 'htiy'='htiy leads to s...

CVE-2022-31879

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...

CVE-2020-36550

Cross Site Scripting XSS vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Table Name field to /dashboard/table-list.php...

CVE-2020-36552

CVE-2020-36552 affects SourceCodester Multi Restaurant Table Reservation System 1.0. The vulnerability is a reflected XSS via the Made field to /dashboard/menu-list.php, allowing execution of arbitrary scripts in the context of the affected site. The NVD CVSS v3.1 base score is 5.4 (MEDIUM), with...

CVE-2020-36553

CVE-2020-36553 is an XSS vulnerability affecting SourceCodester Multi Restaurant Table Reservation System 1.0. The issue is triggered via the Area(food_type) field when accessing /dashboard/menu-list.php. Connected documents consistently describe a cross-site scripting vulnerability in the same p...

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Parking Management System 1.0. This affects an unknown part of the file /cispms/admin/category. The manipulation of the argument vehicletype with the input "alert"XSS" leads to cross site scripting. It is...

CVE-2022-2263

CVE-2022-2263 affects Online Hotel Booking System 1.0. The vulnerability resides in the edit_room_cat.php component (Room Handler) where manipulating the roomname parameter leads to a SQL injection. Exploitation can be performed remotely and publicly disclosed, enabling an attacker to compromise ...

CVE-2022-2262

CVE-2022-2262 affects Online Hotel Booking System 1.0, specifically the vulnerable code path in the Room Handler’s file edit_all_room.php. The issue is a SQL injection triggered by manipulating the id parameter (example input 2828%27%20AND%20(SELECT%203766%20FROM%20(SELECT(SLEEP(5)))BmIK)%20AND%2...

Laundry Management System 1.0 SQL Injection

Exploit Title: Laundry Management System 1.0 - Authenticated SQL Injection Date: 29-06-2022 Exploit Author: syad Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-cilaundry.zip Version: 1.0 Tested on: Windows 1...

Zoo Management System 1.0 Cross Site Scripting

Exploit Title: Zoo Management System 1.0 - Stored Cross-Site-Scripting XSS Date: 05/26/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Version: 1.0...

CVE-2022-2212

A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

Cross site scripting

Cross Site Scripting XSS vulnerability in sourcecodester School File Management System 1.0 via the Firtstname parameter to the Update Account form in studentprofile.php...

CVE-2022-2018

A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. Affected is an unknown function of the file /admin/?page=inmates/viewinmate of the component Inmate Handler. The manipulation of the argument id with the input...

Cross site scripting

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...

Sql injection

Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php...

CVE-2022-30797

CVE-2022-30797 affects Online Ordering System 1.0 (admin/vieworders.php) and is caused by an SQL injection vulnerability. Affected component is the web application's admin view orders interface; the root cause is improper input handling/validation on that page. Documented impact includes potentia...

Cross site scripting

A vulnerability, which was classified as problematic, was found in Student Information System 1.0. Affected is admin/?page=students of the Student Roll module. The manipulation with the input alert1 leads to authenticated cross site scripting. Exploit details have been disclosed to the public...