CVE-2021-44091

CVE-2021-44091 targets SourceCodester/ Courcecodester Multi Restaurant Table Reservation System 1.0. The XSS vulnerability occurs in register.php via the fullname, phone and address parameters, allowing injection of client-side code. Public documentation from multiple sources (CNVD/CNNVD, NVD/CVE...

Online Diagnostic Lab Management System 1.0 - SQL Injection Vulnerability

Exploit Title: Online Diagnostic Lab Management System 1.0 - SQL Injection Unauthenticated Exploit Author: Himash Vendor Homepage: https://www.sourcecodester.com/php/15129/online-diagnostic-lab-management-system-php-free-source-code.html Software Link:...

Online Railway Reservation System 1.0 - (Multiple) Stored Cross Site Scripting Vulnerability

Exploit Title: Online Railway Reservation System 1.0 - 'Multiple' Stored Cross Site Scripting XSS Unauthenticated Exploit Author: Zachary Asher Vendor Homepage: https://www.sourcecodester.com/php/15121/online-railway-reservation-system-phpoop-project-free-source-code.html Software Link:...

CVE-2021-45334

CVE-2021-45334 affects Sourcecodester Online Thesis Archiving System 1.0. Multiple connected sources describe a SQL Injection vulnerability in this product, caused by insufficient validation of externally supplied SQL statements in the application. The vulnerability can enable bypass of admin aut...

CVE-2021-46072

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...

Privilege escalation

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel...

Unrestricted file upload

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

CVE-2021-46068

The CVE-2021-46068 issue affects Vehicle Service Management System 1.0, specifically a Stored Cross‑Site Scripting (XSS) vulnerability in the My Account section of the login panel. Exploitation could allow attackers to inject malicious scripts into the application and, as described in connected s...

CVE-2021-46071

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel...

CVE-2021-46080

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...

CVE-2021-46080

The CVE-2021-46080 entry refers to Vehicle Service Management System 1.0 and describes a CSRF flaw that enables a stored XSS vulnerability. Public sources (CNVD/CNNVD and NVD) attribute the issue to forged-token validation failures in cross-site requests, leading to stored XSS when an attacker lu...

CVE-2021-44599

The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted with...

CVE-2021-44599

CVE-2021-44599 affects Online Enrollment Management System 1.0. The issue is a SQL injection in the id parameter, where a crafted payload can invoke MySQL load_file via a UNC path referencing an external URL, with the app interacting with that domain, indicating query execution. Root cause: lack ...

CVE-2021-44599

The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted with...

CVE-2021-45253

The CVE-2021-45253 entry concerns Simple Cold Storage Management System 1.0. The vulnerability is in the id parameter of view_storage.php, allowing SQL injection. A payload injected a SQL sub-query invoking MySQL load_file with a UNC path referencing an external URL, and the application interacte...

CVE-2021-45253

The id parameter in viewstorage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted...

Sql injection

Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as admin to the application...

CVE-2021-44653

Online Magazine Management System 1.0 is vulnerable to a SQL injection in the login form that bypasses authentication, enabling an attacker to gain admin access. The root cause is a SQL injection in the login workflow, as described across multiple sources. Impact: admin-level access to the applic...

Online Thesis Archiving System 1.0 - SQL injection Authentication Bypass Vulnerability

Exploit Title: Online Thesis Archiving System 1.0 - SQLi Authentication Bypass Exploit Author: Yehia Elghaly YME Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15083/online-thesis-archiving-system-using-phpoop-free-source-code.html Version: Onli...