CVE-2022-30495: Authorization Bypass Through User-Controlled Key

In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin passwordvertical privilege escalation...

PT-2022-20140

Name of the Vulnerable Software and Affected Versions oretnom23 Automotive Shop Management System version 1.0 Description The issue allows remote attackers to exploit a blind SQL Injection Vulnerability through the product id parameter. This vulnerability enables attackers to dump all database...

CVE-2022-30493: Improper Neutralization of Special Elements used in an SQL Command

In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin accessprivilege escalation...

PT-2022-20141

Name of the Vulnerable Software and Affected Versions oretnom23 Automotive Shop Management System version 1.0 Description The issue concerns a stored XSS Injection Vulnerability in the first and last name user fields, allowing remote attackers to gain admin access and view internal IPs...

CVE-2022-30494: Improper Neutralization of Input During Web Page Generation

In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection Vulnerability allowing remote attackers to gain admin access and view internal IPs...

PT-2022-20142

Name of the Vulnerable Software and Affected Versions oretnom23 Automotive Shop Management System version 1.0 Description The issue concerns a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference IDOR, allowing attackers to perform vertical privilege escalation by...

Attendance and Payroll System Security Vulnerabilities

Attendance and Payroll System is an attendance and payroll system using PHP/MySQLi source code by oretnom23 individual developers. sourcecodester Attendance and Payroll System is vulnerable to remote code execution, which can be exploited by attackers to upload maliciously crafted PHP...

Cross site scripting

Cross site scripting XSS vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php...

Cross site scripting

Cross Site Scripting XSS in Sourcecodester Try My Recipe Recipe Sharing Website - CMS by oretnom23, allows attackers to gain the PHPSESID or other unspecified impacts via the fullname parameter to the loginregistration page...

CVE-2021-43420

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

CVE-2021-43420

CVE-2021-43420 affects Sourcecodester Online Payment Hub v1 (Login.php) by oretnom23. A SQL injection is possible via the username parameter, caused by insufficient input handling (no filtering/escaping of SQL data). Reported as a high/critical issue in CVSS metrics (NVD): CVSS 2.0 base score 7.5...

CVE-2021-42168

CVE-2021-42168 affects Sourcecodester Try My Recipe (a Recipe Sharing Website CMS). The vulnerability is a Cross Site Scripting (XSS) flaw in the fullname parameter of the login_registration page, caused by insufficient input filtering/escaping. The issue can enable an attacker to obtain the PHPS...

CVE-2021-41659

SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username or password field...

CVE-2021-41660

SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php...

Sql injection

SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php...

Cross site scripting

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

CVE-2021-41472

SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters...

Sql injection

SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters...

Sql injection

SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters...

CVE-2021-41472

SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters...