CVE-2024-7226

CVE-2024-7226 refers to a cross-site request forgery in SourceCodester Medicine Tracker System 1.0, affecting the code path /classes/Users.php?f=save_user within the Password Change Handler. The vulnerability is triggered remotely and can be exploited after a user visit, with the exploit reported...

CVE-2024-7225

SourceCodester Insurance Management System 1.0 contains a cross-site scripting (XSS) vulnerability in the Edit Insurance Policy Page, specifically via the pname parameter of /Script/admin/core/update_policy. The issue is exploitable remotely and is triggered by input handling on that page; multip...

CVE-2024-7225 SourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/updatepolicy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site...

CVE-2024-7223

A vulnerability has been found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /viewmodel.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

CVE-2024-7224

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /lotdetails.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

CVE-2024-7223

A vulnerability has been found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /viewmodel.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

CVE-2024-7224 SourceCodester Lot Reservation Management System lot_details.php sql injection

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /lotdetails.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

CVE-2024-7224

CVE-2024-7224 concerns SourceCodester Lot Reservation Management System 1.0. The vulnerability is in the /lot_details.php file where manipulating the id argument leads to a SQL injection. The issue can be exploited remotely, and public exploit information is available. Connected documents do not ...

CVE-2024-7224 SourceCodester Lot Reservation Management System lot_details.php sql injection

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /lotdetails.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

CVE-2024-7223 SourceCodester Lot Reservation Management System view_model.php sql injection

A vulnerability has been found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /viewmodel.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

CVE-2024-7223

CVE-2024-7223 affects SourceCodester Lot Reservation Management System 1.0. A SQL injection vulnerability exists in the /view_model.php file, caused by unsafely handling the id parameter. The vulnerability can be exploited remotely, and public exploits have been disclosed. Remediation details are...

CVE-2024-7223 SourceCodester Lot Reservation Management System view_model.php sql injection

A vulnerability has been found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /viewmodel.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

CVE-2024-7221

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manageuser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and...

CVE-2024-7222

A vulnerability, which was classified as critical, was found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the file /home.php. The manipulation of the argument type leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2024-7222

CVE-2024-7222 affects SourceCodester Lot Reservation Management System 1.0. The vulnerability is in an unknown function of the file /home.php, where manipulation of the parameter named type leads to SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. Multiple ...

CVE-2024-7222 SourceCodester Lot Reservation Management System home.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the file /home.php. The manipulation of the argument type leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2024-7222 SourceCodester Lot Reservation Management System home.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the file /home.php. The manipulation of the argument type leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2024-7221 SourceCodester/Campcodes School Log Management System manage_user.php sql injection

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manageuser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and...

CVE-2024-7221 SourceCodester/Campcodes School Log Management System manage_user.php sql injection

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manageuser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and...

CVE-2024-7221

SourceCodester Campcodes School Log Management System 1.0 contains a SQL injection flaw in /admin/manage_user.php caused by unsafely handling the id parameter. The vulnerability can be exploited remotely and has had a public exploit disclosed. Documents do not provide a remediation or patch versi...