CVE-2024-37840

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter...

itsourcecode Learning Management System Security Vulnerability

itsourcecode Learning Management System is a learning management system from itsourcecode, Inc. A security vulnerability exists in itsourcecode Learning Management System v1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the...

CVE-2024-37840

Affected software : Itsourcecode Learning Management System Project In PHP With Source Code v1.0. Vulnerability : SQL injection in processscore.php via the LessonID parameter. Root cause/impact : Allows remote attackers to execute arbitrary SQL commands; CVSS v3.1 score 8.8 (HIGH) with network ac...

CVE-2024-6041

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploi...

CVE-2024-6041

CVE-2024-6041 affects itsourcecode Gym Management System 1.0. The vulnerability is in the file manage_user.php, where improper handling of the id parameter enables SQL injection. The issue can be exploited remotely and the exploit has been disclosed publicly. Multiple connected sources corroborat...

PT-2024-37338 · Unknown · Itsourcecode Farm Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Gym Management System version 1.0 Description: A critical issue was found in the itsourcecode Gym Management System, affecting an unknown functionality of the file manage user.php. The manipulation of the id argument leads to SQL...

PT-2024-37339 · Unknown · Itsourcecode Real Estate Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Real Estate Management System version 1.0 Description: A critical issue has been found in the itsourcecode Real Estate Management System, affecting some unknown functionality of the file property-detail.php. The manipulation of t...

CVE-2024-6016

A vulnerability, which was classified as critical, has been found in itsourcecode Online Laundry Management System 1.0. Affected by this issue is some unknown functionality of the file adminclass.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

CVE-2024-6016

A vulnerability, which was classified as critical, has been found in itsourcecode Online Laundry Management System 1.0. Affected by this issue is some unknown functionality of the file adminclass.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

CVE-2024-6016 itsourcecode Online Laundry Management System admin_class.php sql injection

A vulnerability, which was classified as critical, has been found in itsourcecode Online Laundry Management System 1.0. Affected by this issue is some unknown functionality of the file adminclass.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

CVE-2024-6016

CVE-2024-6016 affects itsourcecode Online Laundry Management System v1.0, specifically the admin_class.php file where manipulations of the id parameter enable SQL injection. The vulnerability enables remote exploitation with no required user interaction; exploitation details have been publicly di...

CVE-2024-6015

A vulnerability classified as critical was found in itsourcecode Online House Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file manageuser.php. The manipulation of the argument monthof leads to sql injection. The attack can be launched remotely. The exploit...

CVE-2024-6014 itsourcecode Document Management System edithis.php sql injection

A vulnerability classified as critical has been found in itsourcecode Document Management System 1.0. Affected is an unknown function of the file edithis.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

CVE-2024-6014

The CVE-2024-6014 entry concerns itsourcecode Document Management System 1.0. Affects an unknown function in edithis.php where manipulating the id parameter triggers SQL injection, enabling remote exploitation. Multiple connected sources confirm SQLi in edithis.php with remote access and public e...

CVE-2024-6013

A vulnerability was found in itsourcecode Online Book Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-6009

A vulnerability has been found in itsourcecode Event Calendar 1.0 and classified as critical. Affected by this vulnerability is the function regConfirm/regDelete of the file process.php. The manipulation of the argument userId leads to sql injection. The attack can be launched remotely. The explo...

CVE-2024-6013 itsourcecode Online Book Store admin_delete.php sql injection

A vulnerability was found in itsourcecode Online Book Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-6013 itsourcecode Online Book Store admin_delete.php sql injection

A vulnerability was found in itsourcecode Online Book Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-6013

CVE-2024-6013 concerns itsourcecode Online Book Store 1.0, where the vulnerability resides in admin_delete.php’s handling of the bookisbn parameter. The documented flaw allows SQL injection, with the attack described as remotely initiable and exploited publicly disclosed. Multiple sources (NVD, R...

CVE-2024-6009

CVE-2024-6009 affects itsourcecode Event Calendar 1.0. The vulnerability resides in regConfirm/regDelete in process.php, where manipulating the userId parameter enables SQL injection. Exploitation is remote and the vulnerability has been publicly disclosed. Mitigations documented in connected sou...