CVE-2024-6731 SourceCodester Student Study Center Desk Management System Master.php sql injection

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. This affects an unknown part of the file /Master.php?f=savestudent. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-6731

The CVE-2024-6731 entry refers to SourceCodester Student Study Center Desk Management System 1.0. The vulnerability is a SQL injection in the file /Master.php?f=save_student triggered by manipulating the id parameter, allowing remote exploitation. Exploitation details are disclosed publicly acros...

CVE-2024-6729

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /control/addact.php. The manipulation of the argument aname leads to sql injection. The attack can be initiated...

CVE-2024-6729

CVE-2024-6729 affects SourceCodester Kortex Lite Advocate Office Management System 1.0. The vulnerability is in the /control/add_act.php file where the aname parameter can be manipulated to trigger SQL injection. The issue is exploitable remotely and exploits have been disclosed publicly. Connect...

CVE-2024-6729 SourceCodester Kortex Lite Advocate Office Management System add_act.php sql injection

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /control/addact.php. The manipulation of the argument aname leads to sql injection. The attack can be initiated...

CVE-2024-6729 SourceCodester Kortex Lite Advocate Office Management System add_act.php sql injection

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /control/addact.php. The manipulation of the argument aname leads to sql injection. The attack can be initiated...

PT-2024-37830 · Sourcecodester · Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A critical issue was found in the system, affecting the file /sscdms/classes/Users.php?f=save. The manipulation of the id argument leads to SQL injection. The...

PT-2024-5264 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue has been identified in the system, specifically affecting the /control/add act.php file. The manipulation of the aname argument leads to SQ...

PT-2024-28784 · Unknown · Sourcecodester Poultry Farm Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Poultry Farm Management System version 1.0 Description: The issue is related to an Unauthenticated Remote Code Execution RCE vulnerability. This vulnerability can be exploited via the productimage parameter at the...

CVE-2024-6650

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this issue is the function savedesignation of the file /classes/Master.php. The manipulation leads to cross site scripting. The attack may be launched remotely...

CVE-2024-6650

Summary: CVE-2024-6650 affects the SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Multiple connected records confirm that the vulnerability arises in the function save_designation within /classes/Master.php , enabling a cross-site scripting (XSS) condition. The attack is descri...

CVE-2024-6650 SourceCodester Employee and Visitor Gate Pass Logging System Master.php save_designation cross site scripting

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this issue is the function savedesignation of the file /classes/Master.php. The manipulation leads to cross site scripting. The attack may be launched remotely...

CVE-2024-6650 SourceCodester Employee and Visitor Gate Pass Logging System Master.php save_designation cross site scripting

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this issue is the function savedesignation of the file /classes/Master.php. The manipulation leads to cross site scripting. The attack may be launched remotely...

CVE-2024-6649

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is the function saveusers of the file Users.php. The manipulation leads to cross-site request forgery. The attack can be launched...

CVE-2024-6649

CVE-2024-6649 affects SourceCodester Employee and Visitor Gate Pass Logging System 1.0, specifically the save_users function in Users.php, where manipulation enables cross-site request forgery. The vulnerability can be exploited remotely and has public tooling/descriptions. Exploitation details a...

CVE-2024-6649 SourceCodester Employee and Visitor Gate Pass Logging System Users.php save_users cross-site request forgery

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is the function saveusers of the file Users.php. The manipulation leads to cross-site request forgery. The attack can be launched...

CVE-2024-6649 SourceCodester Employee and Visitor Gate Pass Logging System Users.php save_users cross-site request forgery

A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is the function saveusers of the file Users.php. The manipulation leads to cross-site request forgery. The attack can be launched...

SUSE CVE-2023-5281

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file removeinboxmessage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

Simple Online Banking System 1.0 SQL Injection Vulnerability

Exploit Title: Simple Online Banking System - SQLi Authentication Bypass Exploit Author: bRpsd Vendor Homepage: https://www.sourcecodester.com/php/14868/banking-system-using-php-free-source-code.html Software Link:...

The vulnerability of the System Info Page component of the Data Management System’s SourceCodester Service Provider Management System allows a attacker to perform XSS attacks.

The vulnerability of the System Info Page component of the Data Management System SourceCodester Service Provider Management System exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...