CVE-2023-2699: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Lost and Found Information System 1.0. Affected by this issue is some unknown functionality of the file admin/?page=items/viewitem of the component GET Parameter Handler. The manipulation of the argument id leads ...

CVE-2023-2694: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate th...

CVE-2023-2698: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=items/manageitem of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

CVE-2023-2695: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack can be...

PT-2023-20853 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue was found in the SourceCodester Online Exam System, affecting some unknown functionality of the file /mahasiswa/data of the component POST Parameter Handler. The...

CVE-2023-2691: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Personnel Property Equipment System 1.0. Affected is an unknown function of the file admin/additem.php of the component POST Parameter Handler. The manipulation of the argument itemname leads to cross site scripting...

CVE-2023-2690: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Personnel Property Equipment System 1.0. This issue affects some unknown processing of the file admin/returnedreuseform.php of the component GET Parameter Handler. The manipulation of the argument clientid leads t...

SourceCodester ICT Laboratory Management System 跨站脚本漏洞

ICT Laboratory Management System is an ICT Laboratory Management System by kevind individual developers. A cross-site scripting vulnerability exists in SourceCodester ICT Laboratory Management System version 1.0, which stems from a problem in the file views/roominfo.php in the component GET...

SourceCodester Personnel Property Equipment System 跨站脚本漏洞

Personnel Property Equipment System is a personnel property equipment management system by Jon Remus Sevellejo personal developer. A cross-site scripting vulnerability exists in Personnel Property Equipment System v1.0, which stems from the lack of effective filtering and escaping of user-supplie...

CVE-2023-2697: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to launch the...

CVE-2023-2693: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Exam System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mahasiswa/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack...

PT-2023-20861 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue has been found in the SourceCodester Online Exam System, affecting the component POST Parameter Handler, specifically the file /dosen/data. The manipulation of the...

Cross site scripting

A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /filemanager/admin/saveuser.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross si...

CVE-2023-2678 SourceCodester File Tracker Manager System POST Parameter save_user.php cross site scripting

A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /filemanager/admin/saveuser.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross si...

Sql injection

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as critical. This affects an unknown part of the file admin/?page=categories/viewcategory of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. I...

CVE-2023-2669

SourceCodester Lost and Found Information System 1.0 contains a SQL injection in the GET Parameter Handler, specifically the admin/?page=categories/view_category path, where manipulating the id parameter enables remote exploitation. Multiple connected sources confirm the flaw, its exploitation ma...

CVE-2023-2669: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as critical. This affects an unknown part of the file admin/?page=categories/viewcategory of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. I...

CVE-2023-2668: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this issue is the function managercategory of the file admin/?page=categories/managecategory of the component GET Parameter Handler. The manipulation of the argument id leads ...

CVE-2023-2672: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file items/view.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch th...

CVE-2023-2678: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /filemanager/admin/saveuser.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross si...