CVE-2024-9808 SourceCodester Online Eyewear Shop sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=products/viewproduct. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-9808

CVE-2024-9808 affects SourceCodester Online Eyewear Shop v1.0. The vulnerability is a SQL injection in an unknown function of the file /admin/?page=products/view_product via the id argument, allowing remote exploitation. Multiple sources confirm a public exploit/disclosure. Some reports (PT-2024-...

CVE-2024-9799

A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument...

CVE-2024-9799

A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument...

CVE-2024-9799 SourceCodester Profile Registration without Reload Refresh add.php cross site scripting

A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument...

CVE-2024-9799

CVE-2024-9799 affects SourceCodester Profile Registration without Reload Refresh 1.0. The vulnerable component is add.php, where parameters such as email_address, address, company_name, job_title, and jobDescription can be manipulated to trigger cross-site scripting. The issue can be exploited re...

CVE-2024-9799 SourceCodester Profile Registration without Reload Refresh add.php cross site scripting

A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument...

SourceCodester Online Veterinary Appointment System SQL注入漏洞

SourceCodester Online Veterinary Appointment System is a SourceCodester open source online veterinary appointment system. A SQL injection vulnerability exists in SourceCodester Online Veterinary Appointment System version 1.0, which originates from the parameter id of the file...

SourceCodester Profile Registration without Reload Refresh 跨站脚本漏洞

SourceCodester Profile Registration without Reload Refresh is a SourceCodester open source application. A cross-site scripting vulnerability exists in SourceCodester Profile Registration without Reload Refresh version 1.0, which originates in the file add.php with the parameters...

SourceCodester Record Management System 跨站脚本漏洞

SourceCodester Record Management System is a SourceCodester open source record management system. A cross-site scripting vulnerability exists in SourceCodester Record Management System version 1.0, which stems from the parameter qualification in the file sort2user.php that can lead to cross-site...

CVE-2024-46293

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Incorrect Access Control. There is a lack of authorization checks for admin operations. Specifically, an attacker can perform admin-level actions without possessing a valid session token. The application does not verify whether t...

CVE-2024-46293

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Incorrect Access Control. There is a lack of authorization checks for admin operations. Specifically, an attacker can perform admin-level actions without possessing a valid session token. The application does not verify whether t...

PT-2024-31948 · Sourcecodester · Sourcecodester Online Medicine Ordering System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Medicine Ordering System version 1.0 Description: The issue is related to Incorrect Access Control, where there is a lack of authorization checks for admin operations. Specifically, an attacker can perform admin-level...

CVE-2024-9328

A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /control/editclient.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-9328

A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /control/editclient.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-9328

CVE-2024-9328 concerns the SourceCodester Advocate Office Management System 1.0. The vulnerability is an SQL injection in the /control/edit_client.php page, caused by manipulation of the id argument. It can be exploited remotely and the exploit has been disclosed publicly. Impact is described as ...

CVE-2024-9328 SourceCodester Advocate Office Management System edit_client.php sql injection

A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /control/editclient.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-9328 SourceCodester Advocate Office Management System edit_client.php sql injection

A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /control/editclient.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-9323

A vulnerability was found in SourceCodester Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/action/addstaff.php. The manipulation leads to cross site scripting. The attack can be launched remotely. T...

CVE-2024-9323

A vulnerability was found in SourceCodester Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/action/addstaff.php. The manipulation leads to cross site scripting. The attack can be launched remotely. T...