CVE-2024-7661

The CVE-2024-7661 entry affects SourceCodester Car Driving School Management System 1.0, specifically the save_users function in admin/user/index.php. The vulnerability is cross‑site request forgery that can be triggered remotely, and public disclosures exist. Connected sources describe the issue...

CVE-2024-7661 SourceCodester Car Driving School Management System index.php save_users cross-site request forgery

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been classified as problematic. This affects the function saveusers of the file admin/user/index.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely...

CVE-2024-7660 SourceCodester File Manager App Add File cross site scripting

A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add File Handler. The manipulation of the argument File Title/Uploaded By leads to cross site scripting. The attack can ...

CVE-2024-7660 SourceCodester File Manager App Add File cross site scripting

A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add File Handler. The manipulation of the argument File Title/Uploaded By leads to cross site scripting. The attack can ...

CVE-2024-7660

SourceCodester File Manager App 1.0 contains a cross‑site scripting vulnerability in the Add File Handler. Manipulating the File Title/Uploaded By parameter can trigger XSS, with remote exploitation and a publicly disclosed exploit. Connected advisories do not specify the exact XSS type (reflecte...

PT-2024-38492 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the id argument in an unknown function of the file view details.php. Thi...

PT-2024-38489 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A problematic issue was found, affecting the save users function of the file admin/user/index.php. This leads to cross-site request forgery, which can be initiated...

PT-2024-38505 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A problematic issue has been found in the system, affecting an unknown function of the file addcase stage.php. The manipulation of the cname argument leads ...

PT-2024-38491 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue affects the management of the file manage user.php, where the manipulation of the id argument leads to SQL injection. This issue may be initiated...

PT-2024-38488 · Unknown · Sourcecodester File Manager App

Name of the Vulnerable Software and Affected Versions: SourceCodester File Manager App version 1.0 Description: A vulnerability has been found in the SourceCodester File Manager App, affecting an unknown functionality of the component Add File Handler. The manipulation of the argument File...

PT-2024-38506 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A problematic issue was found in the file add act.php, where the manipulation of the aname argument leads to cross-site scripting. The attack can be launche...

PT-2024-38497 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue affects the delete enrollment function of the Master.php file. The manipulation of the id argument leads to SQL injection. This issue can be initiat...

PT-2024-38499 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A problem was discovered in the function update settings info of the file /classes/SystemSettings.php?f=update settings. The manipulation of the argument...

CVE-2024-7645 SourceCodester Clinics Patient Management System User Page users.php cross-site request forgery

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file users.php of the component User Page. The manipulation leads to cross-site request forgery. The attack can be initiated...

CVE-2024-7645 SourceCodester Clinics Patient Management System User Page users.php cross-site request forgery

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file users.php of the component User Page. The manipulation leads to cross-site request forgery. The attack can be initiated...

CVE-2024-7645

CVE-2024-7645 concerns SourceCodester Clinics Patient Management System 1.0. The User Page component (users.php) is vulnerable to cross-site request forgery. It can be initiated remotely, with the exploit disclosed publicly. Several sources corroborate the CSRF issue in the users.php module. Reme...

CVE-2024-7644

SourceCodester Leads Manager Tool 1.0 is affected by a cross-site scripting vulnerability in the Add Leads Handler, specifically the /endpoint/add-leads.php endpoint. The issue arises from manipulating the leads_name and phone_number parameters, enabling remote XSS. The vulnerability is publicly ...

CVE-2024-7644 SourceCodester Leads Manager Tool Add Leads add-leads.php cross site scripting

A vulnerability was found in SourceCodester Leads Manager Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-leads.php of the component Add Leads Handler. The manipulation of the argument leadsname/phonenumber leads to cross site scripting. It ...

CVE-2024-7644 SourceCodester Leads Manager Tool Add Leads add-leads.php cross site scripting

A vulnerability was found in SourceCodester Leads Manager Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-leads.php of the component Add Leads Handler. The manipulation of the argument leadsname/phonenumber leads to cross site scripting. It ...

CVE-2024-7643

SourceCodester Leads Manager Tool 1.0 contains a SQL injection vulnerability in the Delete Leads Handler, specifically the file /endpoint/delete-leads.php where the leads argument is vulnerable. Exploitation can be remote, and the exploit has been disclosed publicly. Multiple connected sources co...