20152 matches found
SourceCodester Phone Contact Manager Code Execution
The vulnerability of the SourceCodester Phone Contact Manager System is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
SourceCodester Phone Contact Manager Code Execution
The vulnerability of the SourceCodester Phone Contact Manager System is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2024-57522
SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting XSS in Users.php. An attacker can inject a malicious script into the username or name field during user creation...
CVE-2024-57522: Improper Neutralization of Input During Web Page Generation
SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting XSS in Users.php. An attacker can inject a malicious script into the username or name field during user creation...
SourceCodester Packers and Movers Management System security vulnerabilities
SourceCodester Packers and Movers Management System is an open source packers and movers management system from Sourcecodester. A security vulnerability exists in version 1.0 of the SourceCodester Packers and Movers Management System, which stems from a cross-site scripting vulnerability in...
CVE-2025-0802
A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Viewuser.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The atta...
CVE-2025-0800
A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the...
CVE-2025-0800
A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the...
CVE-2025-0802
A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Viewuser.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The atta...
CVE-2025-0802 SourceCodester Best Employee Management System Administrative Endpoint View_user.php access control
A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Viewuser.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The atta...
CVE-2025-0802
CVE-2025-0802 affects SourceCodester Best Employee Management System 1.0 (Administrative Endpoint: /admin/View_user.php). The vulnerability causes improper access controls in the View_user.php function, enabling a remote attacker to access restricted functionality without required privileges. Mul...
CVE-2025-0800 SourceCodester Online Courseware Edit Teacher saveeditt.php cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the...
CVE-2025-0800
CVE-2025-0800 affects SourceCodester Online Courseware 1.0, specifically the Edit Teacher component (file /pcci/admin/saveeditt.php). The vulnerability arises from manipulation of the fname argument, enabling cross-site scripting. The issue can be triggered remotely, and public exploits exist. Mu...
CVE-2025-0802: Improper Access Control
A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Viewuser.php of the component Administrative Endpoint. The manipulation leads to improper access controls. The atta...
CVE-2025-0800: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the...
SourceCodester’s Best Employee Management System has security vulnerabilities
SourceCodester Best Employee Management System is a SourceCodester open source employee management system. A security vulnerability exists in SourceCodester Best Employee Management System version 1.0, which originates in the file /admin/Viewuser.php and can lead to improper access control...
CVE-2025-0464
A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be...
CVE-2025-0464 SourceCodester Task Reminder System Maintenance Section cross site scripting
A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be...
CVE-2025-0464
SourceCodester Task Reminder System 1.0 is affected in the Maintenance Section. The vulnerability stems from the System Name parameter, enabling cross-site scripting (XSS). The attack can be launched remotely and the exploit has been disclosed publicly. Mitigation guidance available in connected ...