PT-2023-16841 · Sourcecodester · Health Center Patient Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A critical issue was found in the login.php file, where the manipulation of the username argument leads to sql injection. This issue can be exploited...

Computer Parts Sales and Inventory System 跨站脚本漏洞

Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Computer Parts Sales and Inventory System version 1.0, which stems from the fact that manipulation of...

SourceCodester Computer Parts Sales and Inventory System 跨站脚本漏洞

Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Computer Parts Sales and Inventory System version 1.0, which stems from unknown problematic code in th...

Music Gallery Site SQL注入漏洞

Music Gallery Site is a music gallery site by Carlo Montero, a personal developer. A SQL injection vulnerability exists in SourceCodester Music Gallery Site version 1.0 due to some unknown processing in the file viewcategory.php, which results in an sql injection via the parameter id...

Online Pet Shop We App 跨站脚本漏洞

Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in SourceCodester Online Pet Shop We App version 1.0, which stems from the fact that incorrect manipulation of the parameter oid can lead to cross-site...

PT-2023-1563 · Sourcecodester · Dental Clinic Appointment Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Dental Clinic Appointment Reservation System version 1.0 Description: A vulnerability was found in the Dental Clinic Appointment Reservation System, affecting the file /APR/signup.php, specifically the POST Parameter Handler...

Alphaware Simple E-Commerce System 访问控制错误漏洞

Alphaware Simple E-Commerce System is an e-commerce system by razormist individual developers. An Access Control Error vulnerability exists in SourceCodester Alphaware Simple E-Commerce System version 1.0, which stems from incorrect manipulation of the parameter amount resulting in incorrect acce...

Medical Certificate Generator App 跨站脚本漏洞

The Medical Certificate Generator App is a simple web application for medical clinics. A cross-site scripting vulnerability exists in SourceCodester Medical Certificate Generator App version 1.0, which stems from incorrect manipulation of a special parameter that results in cross-site scripting...

Online Pizza Ordering System 跨站脚本漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Online Pizza Ordering System version 1.0. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...

PT-2023-16669 · Sourcecodester · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A problematic issue has been found in the processing of the file "admin/ajax.php?action=save user", leading to cross-site request forgery. The attack can be initiated...

Yoga Class Registration System SQL注入漏洞

Yoga Class Registration System is a yoga class registration system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Yoga Class Registration System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...

Online Eyewear Shop 跨站脚本漏洞

Online Eyewear Shop is an online eyewear store by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in SourceCodester Online Eyewear Shop version 1.0, which stems from a problem with the file admin/?page=orders/vieworder, where manipulation of the parameter id ca...

CVE-2023-0917

A vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management System 1.0. This affects an unknown part of the file /php-scrm/login.php. The manipulation of the argument Password leads to sql injection. It is possible to initiate the attack...

CVE-2023-0903

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file edit-task.php. The manipulation of the argument taskid leads to sql injection. The attack can be initiated remotely. The complexit...

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. SourceCodester Canteen Management System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter id resulting in sql injection...

CVE-2023-0706

A vulnerability, which was classified as critical, has been found in SourceCodester Medical Certificate Generator App 1.0. Affected by this issue is some unknown functionality of the file managerecord.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2023-0532

A vulnerability classified as critical was found in SourceCodester Online Tours & Travels Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/disapproveuser.php. The manipulation of the argument id leads to sql injection. The attack can be launched...

PT-2023-16336 · Sourcecodester · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue affects the processing of the file admin/approve user.php, where the manipulation of the id argument leads to sql injection. The attack can be...

Online Tours & Travels Management System SQL注入漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter todate that ca...

PT-2023-16108 · Sourcecodester · Sourcecodester Online Flight Booking Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Flight Booking Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Online Flight Booking Management System, affecting the file add contestant.php. The...