CVE-2024-7226 SourceCodester Medicine Tracker System Password Change cross-site request forgery

A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=saveuser of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attac...

CVE-2024-6419

CVE-2024-6419 describes a SQL injection in SourceCodester Medicine Tracker System 1.0, affecting unknown code path /classes/Master.php?f=save_medicine where the id parameter is manipulated to exploit the vulnerability. It is remotely exploitable and has been publicly disclosed. Multiple connected...

CVE-2024-6418

A vulnerability classified as critical has been found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file /classes/Users.php?f=registeruser. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...