PT-2025-3074

Name of the Vulnerable Software and Affected Versions SourceCodester Computer Laboratory Management System version 1.0 Description The issue concerns an incorrect access control mechanism. It can be exploited via the "/php-lms/admin/?page=user/list" API endpoint. There is no information provided...

CVE-2024-54818: Improper Preservation of Permissions

SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list...

CVE-2024-5385: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in oretnom23 Online Car Wash Booking System 1.0. This issue affects some unknown processing of the file /admin/?page=user/list. The manipulation of the argument First Name/Last Name with the input leads to cross site scripting...

CVE-2023-3986: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Simple Online Mens Salon Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=user/list. The manipulation of the argument First Name/Last Name/Username leads to cross site scripting. Th...

CVE-2023-3018: Improper Access Control

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/?page=user/list. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit ha...

CVE-2023-0999: Cross-Site Request Forgery (CSRF)

A vulnerability classified as problematic was found in SourceCodester Sales Tracker Management System 1.0. This vulnerability affects unknown code of the file admin/?page=user/list. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been...

CVE-2022-4233: Improper Neutralization

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...

CVE-2022-3716: Improper Neutralization

A vulnerability classified as problematic was found in SourceCodester Online Medicine Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /omos/admin/?page=user/list. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site...

CVE-2022-3546: Improper Neutralization

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handler. The manipulation of the argument First Name/Last...

CVE-2022-22854: Missing Authorization

An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attackers to escalate privileges via accessing and editing the user list...

PT-2022-15712

Name of the Vulnerable Software and Affected Versions Hospital Patient Record Management System version 1.0 Description The issue is related to an access control problem in the hprms/admin/?page=user/list endpoint of the Hospital Patient Record Management System, allowing attackers to escalate...