CVE-2022-2020 SourceCodester Prison Management System System Name cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=systeminfo of the component System Name Handler. The manipulation with the input leads to cross site...

CVE-2022-2020 SourceCodester Prison Management System System Name cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=systeminfo of the component System Name Handler. The manipulation with the input leads to cross site...

CVE-2022-2020

CVE-2022-2020 (SourceCodester Prison Management System 1.0) involves a cross-site scripting vulnerability in the unknown functionality of the file /admin/?page=system_info within the System Name Handler component. The issue is triggered by input like , enabling remote exploitation and potentially...

CVE-2022-2019 SourceCodester Prison Management System New User Creation improper authorization

A vulnerability classified as critical was found in SourceCodester Prison Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php?f=save of the component New User Creation. The manipulation leads to improper authorization. The attack can be...

CVE-2022-2019 SourceCodester Prison Management System New User Creation improper authorization

A vulnerability classified as critical was found in SourceCodester Prison Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php?f=save of the component New User Creation. The manipulation leads to improper authorization. The attack can be...

CVE-2022-2019

CVE-2022-2019 affects SourceCodester Prison Management System 1.0, specifically the New User Creation component via the /classes/Users.php?f=save endpoint. The underlying issue is improper authorization, enabling remote exploitation. Multiple sources confirm a critical severit y with public explo...

CVE-2022-2018 SourceCodester Prison Management System Inmate sql injection

A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. Affected is an unknown function of the file /admin/?page=inmates/viewinmate of the component Inmate Handler. The manipulation of the argument id with the input...

CVE-2022-2018 SourceCodester Prison Management System Inmate sql injection

A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. Affected is an unknown function of the file /admin/?page=inmates/viewinmate of the component Inmate Handler. The manipulation of the argument id with the input...

CVE-2022-2018

CVE-2022-2018 impacts SourceCodester Prison Management System 1.0. The Inmate Handler’s /admin/?page=inmates/view_inmate endpoint is vulnerable where the id parameter can be manipulated to perform SQL injection. The attack can be launched remotely, and public disclosure of the exploit is noted. T...

CVE-2022-2017 SourceCodester Prison Management System Visit view_visit.php sql injection

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pms/admin/visits/viewvisit.php of the component Visit Handler. The manipulation of the argument id with the input...

CVE-2022-2017 SourceCodester Prison Management System Visit view_visit.php sql injection

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pms/admin/visits/viewvisit.php of the component Visit Handler. The manipulation of the argument id with the input...

CVE-2022-2017

The CVE-2022-2017 entry concerns SourceCodester Prison Management System 1.0. A SQL injection vulnerability exists in the Visit Handler component, specifically in the /pms/admin/visits/view_visit.php path where the id parameter can be manipulated (example payload: 2%27and%201=2%20union%20select%2...

PT-2022-14417 · Sourcecodester · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue was found in the New User Creation component, specifically in the /classes/Users.php?f=save file, which leads to improper authorization. This issue can be...

PT-2022-14428

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A problematic issue has been discovered, affecting some unknown functionality of the file "/admin/?page=system info" of the System Name Handler component. The manipulation of the...

PT-2022-14398

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A critical issue affects the Visit Handler component, specifically the file /pms/admin/visits/view visit.php. The manipulation of the id argument with a malicious input leads to S...

PT-2022-14409

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A critical vulnerability has been found in the SourceCodester Prison Management System. The issue is related to the manipulation of the id argument in the /admin/?page=inmates/vie...

CVE-2022-2020: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/?page=systeminfo of the component System Name Handler. The manipulation with the input leads to cross site...

CVE-2022-2019: Improper Authorization

A vulnerability classified as critical was found in SourceCodester Prison Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php?f=save of the component New User Creation. The manipulation leads to improper authorization. The attack can be...

CVE-2022-2018: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. Affected is an unknown function of the file /admin/?page=inmates/viewinmate of the component Inmate Handler. The manipulation of the argument id with the input...

CVE-2022-2017: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pms/admin/visits/viewvisit.php of the component Visit Handler. The manipulation of the argument id with the input...