16566 matches found
CVE-2024-34223
Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket...
CVE-2024-4820 SourceCodester Online Computer and Laptop Store unrestricted upload
A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/SystemSettings.php?f=updatesettings. The manipulation leads to unrestricted upload. The attack can be...
CVE-2024-4820 SourceCodester Online Computer and Laptop Store unrestricted upload
A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/SystemSettings.php?f=updatesettings. The manipulation leads to unrestricted upload. The attack can be...
CVE-2024-4820
CVE-2024-4820 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability resides in the file /classes/SystemSettings.php?f=update_settings, allowing unrestricted (remote) upload. This has been publicly disclosed and is classified as high severity by NVD/CNA sources, with pract...
CVE-2024-4809
CVE-2024-4809 affects SourceCodester Open Source Clinic Management System v1.0. A vulnerability in setting.php allows manipulation of the logo parameter to trigger unrestricted file uploads. Exploitation is remote and the exploit has been publicly disclosed (VDB-263929). Several connected sources...
CVE-2024-4809 SourceCodester Open Source Clinic Management System setting.php unrestricted upload
A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file setting.php. The manipulation of the argument logo leads to unrestricted upload. The attack can be launched...
CVE-2024-4809 SourceCodester Open Source Clinic Management System setting.php unrestricted upload
A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file setting.php. The manipulation of the argument logo leads to unrestricted upload. The attack can be launched...
PT-2024-25759 · Sourcecodester · Sourcecodester Computer Laboratory Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Laboratory Management System version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Short Name parameter...
PT-2024-33021 · Unknown · Sourcecodester Online Computer/Laptop Store
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found, affecting an unknown functionality of the file /classes/SystemSettings.php?f=update settings. This allows for unrestricted upload and ca...
PT-2024-25756 · Sourcecodester · Sourcecodester Stock Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Visitor Management System version 1.0 Description: The issue allows attackers to execute arbitrary SQL commands, potentially leading to data exfiltration. This can be exploited remotely via the id parameter in the...
Prison Management System - SQL Injection Authentication Bypass Vulnerability
Exploit : Prison Management System Using PHP -SQL Injection Authentication Bypass Exploit Author: Sanjay Singh Vendor Homepage: https://www.sourcecodester.com Software Link:https://www.sourcecodester.com/sql/17287/prison-management-system.html Tested on: Windows ,XAMPP CVE : CVE-2024-33288 Proof ...
PT-2024-25752 · Unknown · Sourcecodester Human Resource Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Human Resource Management System version 1.0 Description: The issue allows for SQL Injection via the searccountry parameter. Recommendations: For Sourcecodester Human Resource Management System version 1.0, consider restricting...
PT-2024-25753 · Sourcecodester · Sourcecodester Human Resource Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System version 1.0 Description: The issue allows attackers to approve or reject leave tickets due to an insecure permission vulnerability in the /hrm/leaverequest.php file. Recommendations: For version...
CVE-2024-4798 SourceCodester Online Computer and Laptop Store manage_brand.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /admin/maintenance/managebrand.php. The manipulation of the argument id leads to sql injection. The attack may...
CVE-2024-4798
CVE-2024-4798 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability lies in the file /admin/maintenance/manage_brand.php where the parameter id is used unsafely in an SQL query, enabling a remote SQL injection. The issue is exploitable over the network and the exploit has...
CVE-2024-4798 SourceCodester Online Computer and Laptop Store manage_brand.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /admin/maintenance/managebrand.php. The manipulation of the argument id leads to sql injection. The attack may...
PT-2024-32929 · Sourcecodester · Sourcecodester Online Computer/Laptop Store
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /admin/maintenance/manage brand.php. The manipulation of the id argumen...
PT-2024-32987 · Sourcecodester · Sourcecodester Open Source Clinic Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Open Source Clinic Management System version 1.0 Description: A critical issue has been found in the SourceCodester Open Source Clinic Management System, affecting an unknown functionality of the file setting.php. The...
CVE-2024-34220
CVE-2024-34220 affects Sourcecodester Human Resource Management System 1.0 and is described as a SQL Injection via the 'leave' parameter. Public PoC/exploit code exists (e.g., on GitHub), showing parameterized input being unsafely handled and allowing sleep-based timing tricks. Red Hat/PT-Securit...