5 matches found
CVE-2024-2065 SourceCodester Barangay Population Monitoring System update-resident.php cross site scripting
A vulnerability was found in SourceCodester Barangay Population Monitoring System up to 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/update-resident.php. The manipulation of the argument fullname leads to cross site scripting. The...
CVE-2024-2065: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Barangay Population Monitoring System up to 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/update-resident.php. The manipulation of the argument fullname leads to cross site scripting. The...
CVE-2024-25209: Improper Neutralization of Special Elements used in an SQL Command
Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/delete-resident.php...
CVE-2022-34024: Unrestricted Upload of File with Dangerous Type
Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module editing function at /bmis/pages/resident/resident.php...
PT-2022-21975
Name of the Vulnerable Software and Affected Versions Barangay Management System version 1.0 Description The Barangay Management System contains an arbitrary file upload vulnerability. This issue is exploited via the resident module editing function at the "/bmis/pages/resident/resident.php" API...