PT-2023-17374 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A problematic issue has been found, affecting an unknown function of the file "/admin/?page=system info". The manipulation of the System Name argument leads to cross-sit...

Sanitization Management System Cross-site Scripting Vulnerability

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System, which originates from unknown functionality in the component the file admin/?page=systeminf, and can be exploited by an attack...

PT-2022-14428

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A problematic issue has been discovered, affecting some unknown functionality of the file "/admin/?page=system info" of the System Name Handler component. The manipulation of the...

PT-2022-14232

Name of the Vulnerable Software and Affected Versions SourceCodester Product Show Room Site version 1.0 Description A problematic issue has been identified, affecting the "/admin/?page=system info/contact info" endpoint. The manipulation of the Telephone textbox with the input alert1 leads to...

PT-2022-19972

Name of the Vulnerable Software and Affected Versions Rescue Dispatch Management System version 1.0 Description The issue is related to Incorrect Access Control. It can be exploited via the API endpoint "http://localhost/rdms/admin/?page=system info". Recommendations For Rescue Dispatch Managemen...

CVE-2019-11567

An issue was discovered in AikCms v2.0. There is a SQL Injection vulnerability via $GET'del', as demonstrated by an admin/page/system/nav.php?del= URI...

PT-2019-12385

Name of the Vulnerable Software and Affected Versions AikCms version 2.0 Description An issue was discovered in AikCms, where there is a SQL Injection vulnerability. This can be exploited via the del variable in the $ GET request, as demonstrated by accessing the /admin/page/system/nav.php endpoi...