Computer Laboratory Management System 1.0 Privilege Escalation Vulnerability

Exploit Title: Computer Laboratory Management System v1.0 - Incorrect access control Exploit Author: Sampath kumar kadajari Vendor Homepage: https://www.sourcecodester.com/php/17268/computer-laboratory-management-system-using-php-and-mysql.html Software Link:...

CVE-2024-34480

SourceCodester Computer Laboratory Management System 1.0 has a SQL Injection vulnerability in admin/category/view_category.php?id. The issue is described across multiple sources, with CVSS 3.1/4.6? Actually CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8 (CRITICAL). The vulne...

CVE-2024-34479

SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection...

CVE-2024-34480

SourceCodester Computer Laboratory Management System 1.0 allows admin/category/viewcategory.php id SQL Injection...

CVE-2024-34479

Vulnerability overview for CVE-2024-34479: Affects SourceCodester Computer Laboratory Management System 1.0. The flaw resides in the classes/Master.php id parameter, enabling SQL Injection due to insufficient input handling. Reported impact in the sources indicates full confidentiality, integrity...

Blog Site 1.0 Cross Site Scripting

============================================================================================================================================= | Title : Blog Site 1.0 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor :...

CVE-2024-7494

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is some unknown functionality of the file /newprescription.php. The manipulation of the argument patient leads to sql injection. The attack may be...

CVE-2024-7494 SourceCodester Clinics Patient Management System new_prescription.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is some unknown functionality of the file /newprescription.php. The manipulation of the argument patient leads to sql injection. The attack may be...

CVE-2024-7494 SourceCodester Clinics Patient Management System new_prescription.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is some unknown functionality of the file /newprescription.php. The manipulation of the argument patient leads to sql injection. The attack may be...

CVE-2024-7494

CVE-2024-7494 affects SourceCodester Clinics Patient Management System 1.0. The vulnerability exists in /new_prescription.php where the patient parameter is manipulated to trigger a SQL injection. It can be exploited remotely and has been disclosed publicly. The issue impacts confidentiality, int...

SourceCodester Clinics Patient Management System SQL注入漏洞

SourceCodester Clinics Patient Management System is a clinic patient management system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Clinics Patient Management System version 1.0, which stems from the parameter patient in the file /newprescription.php that can lead t...

CVE-2024-7454

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is the function patientname of the file patients.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has bee...

CVE-2024-7454 SourceCodester Clinics Patient Management System patients.php patient_name sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is the function patientname of the file patients.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has bee...

CVE-2024-7454

The CVE-2024-7454 entry concerns SourceCodester Clinics Patient Management System 1.0, where the vulnerable component is the function patient_name in patients.php. The root cause is an SQL injection vulnerability that can be triggered remotely, potentially leading to data exposure or modification...

CVE-2024-7454 SourceCodester Clinics Patient Management System patients.php patient_name sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this issue is the function patientname of the file patients.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has bee...

SourceCodester Clinics Patient Management System SQL注入漏洞

SourceCodester Clinics Patient Management System is a clinic patient management system from SourceCodester. SourceCodester Clinics Patient Management System version 1.0 has a SQL injection vulnerability that originates in the patientname function of the patients.php file, which can lead to SQL...

Exploit for Command Injection in Nikhil-Bhalerao Poultry_Farm_Management_System

PoC exploit for CVE-2024-40110, an arbitrary file upload vulnera...

CVE-2024-7378

A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /managequestion.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploi...

CVE-2024-7378 SourceCodester Simple Realtime Quiz System manage_question.php sql injection

A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /managequestion.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploi...

CVE-2024-7378 SourceCodester Simple Realtime Quiz System manage_question.php sql injection

A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /managequestion.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploi...