16968 matches found
CVE-2026-95926 SourceCodester Online Reviewer Management System btn_functions.php update sql injection
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/pretest/btnfunctions.php?action=update. This manipulation of the argument testid causes sql injection. The attack is possib...
CVE-2026-95926
The SourceCodester Online Reviewer Management System 1.0 is vulnerable to a remote SQL injection vulnerability. The flaw exists within an unknown function in the file /reviewer_0/admins/assessments/pretest/btn_functions.php?action=update. Attackers can exploit this by manipulating the test_id arg...
EUVD-2026-84996
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/pretest/btnfunctions.php?action=update. This manipulation of the argument testid causes sql injection. The attack is possib...
CVE-2026-95925
A SQL injection vulnerability exists in SourceCodester Online Reviewer Management System 1.0 . The flaw is located within an unknown function in the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=update, where manipulating the difficulty_id argument allows for remote execut...
CVE-2026-95925 SourceCodester Online Reviewer Management System btn_functions.php update sql injection
A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/databank/btnfunctions.php?action=update. The manipulation of the argument difficultyid results in sql injection. The attack can ...
EUVD-2026-84995
A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/databank/btnfunctions.php?action=update. The manipulation of the argument difficultyid results in sql injection. The attack can ...
CVE-2026-95924
A SQL injection vulnerability exists in the SourceCodester Online Reviewer Management System 1.0 . The flaw is located in an unknown function within the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=add. An attacker can exploit this by manipulating the difficulty_id argume...
EUVD-2026-84994
A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/databank/btnfunctions.php?action=add. The manipulation of the argument difficultyid leads to sql injection. Remote exploitation of the...
CVE-2024-35469
CVE-2024-35469 Submitter: Kha Do Human Resource Management System 1.0 Vulnerability SQL injection Description SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the password parameters. Affected...
CVE-2022-28077
CVE-2022-28077 Home Owners Collection Management System 1.0 - Reflected XSS Exploit Title: Home Owners Collection Management System 1.0 - Reflected XSS Date: 2022-05-06 CVE: CVE-2022-28077 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
CVE-2022-30514
CVE-2022-30514 School Dormitory Management System 1.0 - Reflected XSS Exploit Title: School Dormitory Management System 1.0 - Reflected XSS Date: 2022-05-25 CVE: CVE-2022-30514 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
CVE-2023-30092
CVE-2023-30092 All Details about CVE-2023-30092 Software: Online Pizza Ordering System 1.0 Software Link: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Vulnerability Type: SQL Injection Affected Component: QTY Parameter Impact Denial of Service:...
CVE-2023-31705
CVE-2023-31705 description A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter. Vulnerability Type Cross Site Scripting XSS Vendor of Product Sourcecodster Affected Produc...
CVE-2023-31704
CVE-2023-31704 description Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role. Vulnerability Type Incorrect Access Control Vendor of Product Sourcecodster Affected Product...
CVE-2024-35468
CVE-2024-35468 Submitter: Kha Do Human Resource Management System 1.0 Vulnerability SQL injection Description SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the password parameters. Affecte...
CVE-2024-10354
Source code Petrol pump management software free download | SourceCodester Description SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, A vulnerability has been found that is rated as high risk, affecting some unknown functionality of the admin\print.php file,...
CVE-2024-34223
Human Resource Management System Project in PHP and MySQL Free Source Code Submitter: Kha Do Vulnerability Insecure Permission Description Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave...
CVE-2024-44812-PoC
Vendor SourceCodester Affected Product Link https://www.sourcecodester.com/php/14717/online-complaint-site-using-phpmysqli-full-source-code.html CVE ID: CVE-2024-44812 Description: SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the...
CVE-2024-34221
Human Resource Management System Project in PHP and MySQL Free Source Code Submitter: Kha Do Vulnerability Insecure permission Description There is an insecure permission vulnerability in /hrm/controller/ccity.php?positionedit= in the SourceCodester Human Resource Management System 1.0, allowing...
CVE-2024-34220
Human Resource Management System Project in PHP and MySQL Free Source Code Submitter: Kha Do Vender: SourceCodester AFFECTED AND/OR FIXED VERSION Vulnerable File applyleave.php PROBLEM TYPE Vulnerability Type SQL Injection Impact The attackers can exploit this vulnerability to gain database...