16566 matches found
Human Resource Management System 安全漏洞
Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Sourcecodester Human Resource Management System version 1.0, which stems from vulnerability to SQL injection attacks...
School Task Manager Security Vulnerability
School Task Manager is a school task manager by rems individual developer. A security vulnerability exists in Sourcecodester School Task Manager version 1.0 that stems from the presence of a stored cross-site scripting XSS attack that results in the execution of a malicious JavaScript payload...
CASAP Automated Enrollment 安全漏洞
CASAP Automated Enrollment is an automated enrollment system for the CASAP organization in the United States. The purpose of this project is to provide an automated enrollment system for CASAP to streamline the process for schools and make it more effective, efficient, and easily retrievable. A...
CVE-2024-28276
Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting XSS via add-task.php?taskname=...
CVE-2024-28276
Sourcecodester School Task Manager 1.0 is affected by a Cross-Site Scripting (XSS) flaw exploitable via add-task.php?task_name=. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE/CVEList, CVE enrichment feeds) with the same root cause: unsanitized input in the task_name p...
CVE-2024-28277
In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subjectname= parameter, enabling Stored Cross-Site Scripting XSS attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloa...
CVE-2024-28277
In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subjectname= parameter, enabling Stored Cross-Site Scripting XSS attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloa...
CVE-2024-28277
CVE-2024-28277 affects Sourcecodester School Task Manager v1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) in the subject_name/subject name parameter, allowing an attacker to manipulate the subject’s name and potentially execute malicious JavaScript payloads. Root cause is unvalidat...
CVE-2024-34231
A cross-site scripting XSS vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Short Name parameter...
CVE-2024-34231
CVE-2024-34231 affects Sourcecodester Laboratory Management System v1.0 with a cross-site scripting (XSS) flaw exploitable via a crafted payload in the System Short Name parameter. The issue enables attackers to execute arbitrary web scripts or HTML, with CVSSv3.1 base score 7.1 (HIGH) and user i...
CVE-2024-34230
A cross-site scripting XSS vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Information parameter...
CVE-2024-34230
A cross-site scripting XSS vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Information parameter...
CVE-2024-34230
Sourcecodester Laboratory Management System v1.0 is affected by a cross-site scripting (XSS) vulnerability in the System Information parameter. The root cause is improper handling/sanitization of user-supplied input, allowing attackers to inject arbitrary web scripts or HTML. Impact disclosed in ...
CVE-2024-34226
The CVE-2024-34226 issue affects SourceCodester Visitor Management System 1.0, specifically the /php-sqlite-vms/?page=manage_visitor&id=1 endpoint. A SQL injection in the id parameter enables attackers to execute arbitrary SQL commands, with potential data leakage or manipulation. Exploitation is...
CVE-2024-34226
SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...
CVE-2024-34226
SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...
CVE-2024-34221
CVE-2024-34221 affects Sourcecodester Human Resource Management System 1.0. The issue is described as an insecure permissions bug that can lead to privilege escalation. CVSS v3.1 metrics show a HIGH impact (C/H/I/A) with network attack vector, low attack complexity, and privileges required at LOW...
CVE-2024-34222
CVE-2024-34222 affects Sourcecodester Human Resource Management System 1.0, where an SQL Injection flaw resides in the searccountry parameter. The vulnerability is described as a local, low-complexity issue with low confidentiality, integrity, and availability impact (CVSS 3.1: AV:L/AC:L/PR:N/UI:...
CVE-2024-34223
CVE-2024-34223 concerns an insecure permission vulnerability in the SourceCodester Human Resource Management System (HRS) v1.0, impacting the endpoint /hrm/leaverequest.php . The issue enables an attacker to approve or reject leave tickets due to improper access control. Affects the product and v...