CVE-2024-31507

Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "request" parameter in admin/fetchgendercs.php...

CVE-2024-31506

The CVE concerns Sourcecodester Online Graduate Tracer System v1.0, where the vulnerability is an SQL Injection in the admin/admin_cs.php file triggered by the id parameter. Affected component is the web application’s admin interface; underlying cause is improper handling of the id input leading ...

Online Graduate Tracer System SQL注入漏洞

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Sourcecodester Online Graduate Tracer System v1.0, which originates from a request parameter in admin/fetchgendercs.php that is susceptible to SQL...

CVE-2024-31506

Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "id" parameter in admin/admincs.php...

CVE-2024-31507

Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "request" parameter in admin/fetchgendercs.php...

CVE-2023-4556

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is the function mysqliquery of the file sexit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2023-4556

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is the function mysqliquery of the file sexit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2023-4556 SourceCodester Online Graduate Tracer System sexit.php mysqli_query sql injection

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is the function mysqliquery of the file sexit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2023-4556

The CVE-2023-4556 issue affects SourceCodester Online Graduate Tracer System 1.0, where the mysqli_query usage in sexit.php is vulnerable to SQL injection via the id parameter. The vulnerability can be exploited remotely, and public exploits/details have been disclosed (VDB-238154). Affected comp...

CVE-2023-1854

A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2023-1854

A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...

Information disclosure

A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2023-1854 SourceCodester Online Graduate Tracer System session expiration

A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2023-1854 SourceCodester Online Graduate Tracer System session expiration

A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2023-1854

CVE-2023-1854 — SourceCodester Online Graduate Tracer System 1.0 : A vulnerability in an unknown function in admin/ leads to session expiration. It can be exploited remotely, and the exploit has been disclosed publicly. Public sources (NVD) rate the impact as high (CVSSv3.1: 9.8) with network acc...

Online Graduate Tracer System 代码问题漏洞

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A code issue vulnerability exists in SourceCodester Online Graduate Tracer System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vend...

Sql injection

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been classified as critical. This affects the function mysqliquery of the file bsitemp.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2023-1394

Affected software: SourceCodester Online Graduate Tracer System 1.0. Vulnerable component: bsitemp.php, using mysqli_query. Root cause: improper handling of the id parameter enables SQL injection, reported as remotely exploitable with a publicly disclosed exploit (VDB-222981). Impact is high (per...

CVE-2023-1394 SourceCodester Online Graduate Tracer System bsitemp.php mysqli_query sql injection

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been classified as critical. This affects the function mysqliquery of the file bsitemp.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2023-1309

A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/searchit.php. The manipulation of the argument input leads to sql injection. The attack can be launched remotely. The...