CVE-2024-2068

CVE-2024-2068 affects SourceCodester Computer Inventory System 1.0. The vulnerability is a cross-site scripting issue in the endpoint /endpoint/update-computer.php triggered by manipulating the model parameter, with remote attack potential. Multiple sources confirm the flaw and its public disclos...

CVE-2024-2067

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. T...

CVE-2024-2067

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. T...

CVE-2024-2066

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack...

Sql injection

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. T...

Cross site scripting

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-2067 SourceCodester Computer Inventory System delete-computer.php sql injection

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. T...

CVE-2024-2067

SourceCodester Computer Inventory System 1.0 has a SQL injection vulnerability in /endpoint/delete-computer.php triggered by manipulating the computer parameter. The flaw is exploitable remotely and is considered critical by CVE-2024-2067; multiple sources report the exploit publicly. No official...

CVE-2024-2066 SourceCodester Computer Inventory System add-computer.php cross site scripting

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-2066 SourceCodester Computer Inventory System add-computer.php cross site scripting

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack...

CVE-2024-2066

CVE-2024-2066 affects SourceCodester Computer Inventory System 1.0, with a Cross-Site Scripting (XSS) flaw in /endpoint/add-computer.php triggered via the model argument. The root cause is input manipulation that leads to XSS, allowing remote initiation. Several connected sources confirm the vuln...

PT-2024-18692 · Sourcecodester · Sourcecodester Computer Inventory System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Inventory System version 1.0 Description: A critical issue has been identified, affecting the /endpoint/delete-computer.php file. The manipulation of the computer argument leads to SQL injection. This issue can be...

Computer Inventory System Cross-Site Scripting Vulnerability

Computer Inventory System is a computer inventory system for rems individual developers. A cross-site scripting vulnerability exists in Computer Inventory System version 1.0, which stems from a cross-site scripting issue in the /endpoint/add-computer.php file...

Computer Inventory System SQL Injection Vulnerability

Computer Inventory System is a computer inventory system by rems individual developers. A SQL injection vulnerability exists in Computer Inventory System version 1.0, which stems from an SQL injection issue in the /endpoint/delete-computer.php file...

Computer Inventory System Cross-Site Scripting Vulnerability

Computer Inventory System is a computer inventory system for rems individual developers. A cross-site scripting vulnerability exists in Computer Inventory System version 1.0, which stems from a cross-site scripting issue in the /endpoint/update-computer.php file...

CVE-2024-1926

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /app/ajax/searchsalesreport.php. The manipulation of the argument customer leads to sql injection. The attack may...

CVE-2024-1926

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /app/ajax/searchsalesreport.php. The manipulation of the argument customer leads to sql injection. The attack may...

Sql injection

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /app/ajax/searchsalesreport.php. The manipulation of the argument customer leads to sql injection. The attack may...

CVE-2024-1926 SourceCodester Free and Open Source Inventory Management System search_sales_report.php sql injection

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /app/ajax/searchsalesreport.php. The manipulation of the argument customer leads to sql injection. The attack may...

CVE-2024-1926 SourceCodester Free and Open Source Inventory Management System search_sales_report.php sql injection

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /app/ajax/searchsalesreport.php. The manipulation of the argument customer leads to sql injection. The attack may...