16566 matches found
PT-2024-38476 · Sourcecodester · Sourcecodester Leads Manager Tool
Name of the Vulnerable Software and Affected Versions: SourceCodester Leads Manager Tool version 1.0 Description: A problematic issue has been found, affecting the /endpoint/add-leads.php file of the Add Leads Handler component. The manipulation of the leads name and phone number arguments leads ...
CVE-2024-41332
Incorrect access control in the deletecategory function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete categories...
PT-2024-38475 · Sourcecodester · Sourcecodester Leads Manager Tool
Name of the Vulnerable Software and Affected Versions: SourceCodester Leads Manager Tool version 1.0 Description: A critical issue was found in the Delete Leads Handler component, specifically in the file /endpoint/delete-leads.php. The leads argument is vulnerable to SQL injection, which can be...
CVE-2024-40472
Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."...
CVE-2024-40472
SourceCodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via delete-calorie.php. Multiple sources (NVD, Red Hat, CNNVD, CVE lists, PT Security) confirm an injection flaw in the PHP/MySQL component, enabling data disclosure/integrity/availability impact per CVSS scores (hi...
PT-2024-38470 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue has been discovered, affecting the file delete client.php. The manipulation of the id argument leads to SQL injection. This issue can be...
PT-2024-28859 · Sourcecodester · Sourcecodester Daily Calories Monitoring Tool
Name of the Vulnerable Software and Affected Versions: Sourcecodester Daily Calories Monitoring Tool version 1.0 Description: The issue is related to SQL Injection via the "delete-calorie.php" file. This allows for potential data compromise. There is no information provided about the estimated...
CVE-2024-40473
A Stored Cross Site Scripting XSS vulnerability was found in "managehouses.php" in SourceCodester Best House Rental Management System v1.0. It allows remote attackers to execute arbitrary code via "Houseno" and "Description" parameter fields...
CVE-2024-40476
CVE-2024-40476 corresponds to a CSRF vulnerability in SourceCodester Best House Rental Management System v1.0. The weakness allows an attacker to trick an administrator into performing add/modify/delete actions on tenant data via a crafted page, demonstrated by the Delete Tenant action at /rental...
CVE-2024-40473
A Stored Cross Site Scripting XSS vulnerability was found in "managehouses.php" in SourceCodester Best House Rental Management System v1.0. It allows remote attackers to execute arbitrary code via "Houseno" and "Description" parameter fields...
CVE-2024-40474
A Reflected Cross Site Scripting XSS vulnerability was found in "edit-cate.php" in SourceCodester House Rental Management System v1.0...
CVE-2024-40476
A Cross-Site Request Forgery CSRF vulnerability was found in SourceCodester Best House Rental Management System v1.0. This could lead to an attacker tricking the administrator into adding/modifying/deleting valid tenant data via a crafted HTML page, as demonstrated by a Delete Tenant action at th...
CVE-2024-40475
CVE-2024-40475 affects SourceCodester Best House Rental Management System v1.0. The Red Hat and NVD/NVD-enriched records confirm an Incorrect Access Control vulnerability reachable at the REST/UI endpoints: “/rental/payment_report.php”, “/rental/balance_report.php”, “/rental/invoices.php”, “/rent...
Employee Management System 1.0 SQL Injection
============================================================================================================================================= | Title : Employee Management System v1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...
CVE-2024-40475
SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/paymentreport.php, /rental/balancereport.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php...
CVE-2024-40474
A Reflected Cross Site Scripting XSS vulnerability was found in "edit-cate.php" in SourceCodester House Rental Management System v1.0...
PT-2024-28860 · Sourcecodester · Sourcecodester Best House Rental Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A Stored Cross Site Scripting XSS issue was found in the "manage houses.php" file. It allows remote attackers to execute arbitrary code via the House no and Descripti...
CVE-2024-40476
A Cross-Site Request Forgery CSRF vulnerability was found in SourceCodester Best House Rental Management System v1.0. This could lead to an attacker tricking the administrator into adding/modifying/deleting valid tenant data via a crafted HTML page, as demonstrated by a Delete Tenant action at th...
CVE-2024-40475
SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/paymentreport.php, /rental/balancereport.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php...
