Sales Tracker Management System 1.0 Cross Site Scripting

Exploit Title: Sales Tracker Management System - Cross Site Scripting Vulnerability Authenticated Date: 23/03/2023 Exploit Author: Abdulhakim Öner Vendor Homepage: https://www.sourcecodester.com Software Link:...

GHSA-2Q5C-QW9C-FMVQ Argo CD authenticated but unauthorized users may enumerate Application names via the API

Impact All versions of Argo CD starting with v0.5.0 are vulnerable to an information disclosure bug allowing unauthorized users to enumerate application names by inspecting API error messages. An attacker could use the discovered application names as the starting point of another attack. For...

[SECURITY] [DLA 3315-2] sox regression update

Debian LTS Advisory DLA-3315-2 [email protected] https://www.debian.org/lts/security/ Helmut Grohne March 20, 2023 https://wiki.debian.org/LTS Package : sox Version : 14.4.2+git20190427-1+deb10u2 Debian Bug : 1032082 One of the security fixes released as DLA 3315 introduced a regression...

Medicine Tracker System 1.0 Cross Site Scripting Vulnerability

Exploit Title: Medicine Tracker System - Cross Site Scripting Vulnerability Exploit Author: Abdulhakim Öner Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16308/medicine-tracker-system-php-oop-and-mysql-db-source-code-free-download.html Software...

Medicine Tracker System 1.0 Cross Site Scripting

Exploit Title: Medicine Tracker System - Cross Site Scripting Vulnerability Date: 19/03/2023 Exploit Author: Abdulhakim Öner Vendor Homepage: https://www.sourcecodester.com Software Link:...

[SECURITY] [DLA 3364-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3364-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 17, 2023 https://wiki.debian.org/LTS -...

CVE-2023-1464

A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=saveuser. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is...

CVE-2023-1464

A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=saveuser. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is...

Authentication flaw

A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=saveuser. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is...

CVE-2023-1464 SourceCodester Medicine Tracker System improper authentication

A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=saveuser. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is...

CVE-2023-1464

CVE-2023-1464 affects SourceCodester Medicine Tracker System 1.0, with an improper authentication flaw in the Users.php?f=save_user endpoint. The vulnerability arises from manipulation of firstname/middlename/lastname/username/password arguments, enabling remote authentication bypass. Multiple co...

CVE-2023-1447

A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown functionality of the file app/?page=medicines/managemedicine. The manipulation of the argument name/description with the input alert'2' leads ...

CVE-2023-1447

A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown functionality of the file app/?page=medicines/managemedicine. The manipulation of the argument name/description with the input alert'2' leads ...

CVE-2023-1439

A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. Th...

CVE-2023-1439

A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. Th...

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. Th...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown functionality of the file app/?page=medicines/managemedicine. The manipulation of the argument name/description with the input alert'2' leads ...

CVE-2023-1447 SourceCodester Medicine Tracker System cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown functionality of the file app/?page=medicines/managemedicine. The manipulation of the argument name/description with the input alert'2' leads ...

CVE-2023-1447

CVE-2023-1447 affects SourceCodester Medicine Tracker System 1.0. A cross-site scripting vulnerability exists in the endpoint app/?page=medicines/manage_medicine, triggered by manipulating the name/description argument with input like . The issue can be exploited remotely against an unknown funct...

CVE-2023-1439 SourceCodester Medicine Tracker System GET Parameter view_details.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. Th...