PT-2024-15420 · Sourcecodester · Sourcecodester Engineers Online Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A problematic vulnerability was found in the Password Change component of the SourceCodester Engineers Online Portal. The issue affects an unknown function of the file change...

CVE-2023-6945 SourceCodester Online Student Management System edit-student-detail.php cross site scripting

A vulnerability has been found in SourceCodester Online Student Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file edit-student-detail.php. The manipulation of the argument notmsg leads to cross site scripting. The attack ca...

CVE-2023-6945: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Online Student Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file edit-student-detail.php. The manipulation of the argument notmsg leads to cross site scripting. The attack ca...

CVE-2023-6765

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function prepare of the file emailsetup.php. The manipulation of the argument name leads to sql injection. The exploit has been disclosed to the public a...

CVE-2023-6765

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function prepare of the file emailsetup.php. The manipulation of the argument name leads to sql injection. The exploit has been disclosed to the public a...

CVE-2023-6765: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function prepare of the file emailsetup.php. The manipulation of the argument name leads to sql injection. The exploit has been disclosed to the public a...

CVE-2023-6473

A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects an unknown part of the file take-quiz.php. The manipulation of the argument quiztaker/yearsection leads to cross site scripting. It is possible to initiate the attack remotely. T...

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects an unknown part of the file take-quiz.php. The manipulation of the argument quiztaker/yearsection leads to cross site scripting. It is possible to initiate the attack remotely. T...

CVE-2023-6473 SourceCodester Online Quiz System take-quiz.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects an unknown part of the file take-quiz.php. The manipulation of the argument quiztaker/yearsection leads to cross site scripting. It is possible to initiate the attack remotely. T...

SourceCodester Online Quiz System Cross-Site Scripting Vulnerability

Online Quiz System is an online testing platform. A cross-site scripting vulnerability exists in SourceCodester Online Quiz System version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameter quiztaker/yearsection...

PT-2023-32682

Name of the Vulnerable Software and Affected Versions SourceCodester Online Quiz System version 1.0 Description A problematic issue was found in the file take-quiz.php, where the manipulation of the quiz taker/year section argument leads to cross-site scripting. This can be initiated remotely...

CVE-2023-6473: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects an unknown part of the file take-quiz.php. The manipulation of the argument quiztaker/yearsection leads to cross site scripting. It is possible to initiate the attack remotely. T...

Cross site scripting

A vulnerability was found in SourceCodester Online Motorcycle Rental System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/?page=bike of the component Bike List. The manipulation of the argument Model with the input "confirm document.cookie...

CVE-2023-5585 SourceCodester Online Motorcycle Rental System Bike List cross site scripting

A vulnerability was found in SourceCodester Online Motorcycle Rental System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/?page=bike of the component Bike List. The manipulation of the argument Model with the input "confirm document.cookie...

CVE-2023-5585: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Online Motorcycle Rental System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/?page=bike of the component Bike List. The manipulation of the argument Model with the input " leads to cross site...

PT-2023-32196 · Unknown · Sourcecodester Online Motorcycle Rental System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Motorcycle Rental System version 1.0 Description: A vulnerability was found in the SourceCodester Online Motorcycle Rental System. It affects the file /admin/?page=bike of the component Bike List. The manipulation of the...

CVE-2023-5423

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirmorder. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely...

CVE-2023-5423 SourceCodester Online Pizza Ordering System sql injection

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirmorder. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely...

PT-2023-32095

Name of the Vulnerable Software and Affected Versions SourceCodester Online Pizza Ordering System version 1.0 Description A critical vulnerability has been found in the SourceCodester Online Pizza Ordering System. This issue affects the file /admin/ajax.php?action=confirm order and is related to...

CVE-2023-5423: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirmorder. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely...