CVE-2024-7809

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /tracking/nbproject/. The manipulation leads to exposure of information through directory listing. The attack...

CVE-2024-7810

CVE-2024-7810 affects SourceCodester Online Graduate Tracer System 1.0. The vulnerability is a SQL injection in the file /tracking/admin/view_itprofile.php, caused by manipulating the id parameter. It can be exploited remotely and, per disclosures, an exploit exists. No official patch/version upd...

CVE-2024-7809 SourceCodester Online Graduate Tracer System nbproject exposure of information through directory listing

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /tracking/nbproject/. The manipulation leads to exposure of information through directory listing. The attack...

PT-2024-38597 · Sourcecodester · Sourcecodester Online Graduate Tracer System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Graduate Tracer System version 1.0 Description: A critical issue affects some unknown functionality of the file /tracking/admin/view itprofile.php. The manipulation of the id argument leads to SQL injection. The attack c...

CVE-2024-6801 SourceCodester Online Student Management System add-students.php unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0. This issue affects some unknown processing of the file /add-students.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated...

CVE-2024-6801

CVE-2024-6801 affects SourceCodester Online Student Management System 1.0. The issue is in the handling of the file parameter image on /add-students.php, where manipulation leads to unrestricted file upload. This allows remote attackers to upload arbitrary files, with potential for high-impact co...

CVE-2024-6801 SourceCodester Online Student Management System add-students.php unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0. This issue affects some unknown processing of the file /add-students.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated...

CVE-2024-6471 SourceCodester Online Tours & Travels Management sms_setting.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2024-6471 SourceCodester Online Tours & Travels Management sms_setting.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management 1.0. This affects an unknown part of the file smssetting.php. The manipulation of the argument uname leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2024-6471

CVE-2024-6471 affects SourceCodester Online Tours & Travels Management 1.0, specifically the sms_setting.php file. The vulnerability is caused by manipulation of the uname parameter, resulting in an SQL injection that can be exploited remotely. Public disclosures exist, indicating exploitation is...

CVE-2024-6280

SourceCodester Simple Online Bidding System 1.0 contains a vulnerability in /admin/ajax.php?action=save_settings where manipulating the img parameter enables unrestricted file upload. The issue is exploitable remotely and has been disclosed publicly. Multiple feeds (NVD, CVE/CVELIST, Red Hat, Vul...

CVE-2024-5894

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file manageproduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2024-5894 SourceCodester Online Eyewear Shop manage_product.php sql injection

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file manageproduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2024-5894

CVE-2024-5894 affects SourceCodester Online Eyewear Shop 1.0, specifically the manage_product.php file. The vulnerability arises from manipulation of the id parameter, leading to SQL injection and enabling remote exploitation. Documents consistently describe a critical/high-severity issue with po...

CVE-2024-32167

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files...

CVE-2024-32167

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files...

CVE-2024-5362 SourceCodester Online Hospital Management System departmentDoctor.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Hospital Management System 1.0. Affected is an unknown function of the file departmentDoctor.php. The manipulation of the argument deptid leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2024-5116

A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown functionality of the file save.php. The manipulation of the argument vote leads to sql injection. The attack may be launched remotely. The...

CVE-2024-5116 SourceCodester Online Examination System save.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown functionality of the file save.php. The manipulation of the argument vote leads to sql injection. The attack may be launched remotely. The...

CVE-2024-5116 SourceCodester Online Examination System save.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown functionality of the file save.php. The manipulation of the argument vote leads to sql injection. The attack may be launched remotely. The...