PT-2023-20789 · Unknown · Sales Tracker Management System

Name of the Vulnerable Software and Affected Versions: Sales Tracker Management System version 1.0 Description: An issue in the Sales Tracker Management System allows a remote attacker to access sensitive information via the "admin/reports" endpoint, specifically through the sales.php component...

CVE-2023-26773

Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privileges via the product list function in the Master.php file...

Sales Tracker Management System 跨站脚本漏洞

Sales Tracker Management System is a sales tracking management system by Carlo Montero Personal Developer. A security vulnerability exists in Sales Tracker Management System version v.1.0. An attacker can exploit this vulnerability to gain access to the product list function in the Master.php fil...

Sales Tracker Management System 安全漏洞

Sales Tracker Management System is a sales tracking management system by Carlo Montero Personal Developer. A security vulnerability exists in Sales Tracker Management System version v.1.0. An attacker can exploit this vulnerability to access sensitive information via the sales.php component of th...

CVE-2023-26773

CVE-2023-26773 is a cross-site scripting (XSS) vulnerability in Sales Tracker Management System v1.0, exploitable via the Master.php product list function. The weakness allows a remote attacker to gain privileges through crafted input, with CVSS 3.1 metrics indicating network access, no privilege...

Medicine Tracker System v1.0 - Sql Injection

Exploit Title: Medicine Tracker System v1.0 - Sql Injection Exploit Author: Sanjay Singh Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-mts0.zip Version: V1.0.0 Tested on: Windows/Linux Proof of Concept: 1-...

[SECURITY] [DLA 3385-1] trafficserver security update

Debian LTS Advisory DLA-3385-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 05, 2023 https://wiki.debian.org/LTS Package : trafficserver Version : 8.1.6+ds-1deb10u1 CVE ID : CVE-2022-31778 CVE-2022-31779 CVE-2022-32749 CVE-2022-37392 Several vulnerabiliti...

CVE-2023-1858

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The...

CVE-2023-1858

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The...

Information disclosure

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The...

CVE-2023-1858

CVE-2023-1858 affects SourceCodester Earnings and Expense Tracker App 1.0. The issue resides in an unspecified part of index.php where manipulating the page parameter leads to information disclosure. It can be exploited remotely. Connected sources corroborate the vulnerability in index.php with r...

CVE-2023-1858 SourceCodester Earnings and Expense Tracker App index.php information disclosure

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The...

PT-2023-17289 · Sourcecodester · Earnings/Expense Tracker App

Name of the Vulnerable Software and Affected Versions: SourceCodester Earnings and Expense Tracker App version 1.0 Description: A problematic issue was found in the software, affecting an unknown part of the file index.php. The manipulation of the page argument leads to information disclosure. It...

Sales Tracker Management System 1.0 Cross Site Scripting

Exploit Title: Sales Tracker Management System v1.0 - One click account takeover XSS Exploit Author: Achuth V P retrymp3 Date: February 08, 2023 CVE: CVE-2023-26773 Vendor Homepage: https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html Software...

Earnings and Expense Tracker App 信息泄露漏洞

Expense Tracker is an expense tracker organized by SourceCode and Projects. An information disclosure vulnerability exists in the SourceCodester Earnings and Expense Tracker App. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announceme...

Sql injection

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...

CVE-2023-1785 SourceCodester Earnings and Expense Tracker App manage_user.php sql injection

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...

CVE-2023-1785

CVE-2023-1785 affects SourceCodester Earnings and Expense Tracker App 1.0. The vulnerability is a SQL injection in the unknown function of the file manage_user.php triggered by manipulation of the id parameter, allowing remote exploitation. Multiple connected sources corroborate the existence of ...

Expense Tracker SQL注入漏洞

Expense Tracker is an expense tracker organized by SourceCode and Projects. Earnings and Expense Tracker App version 1.0 suffers from a SQL injection vulnerability that originates from a sql injection via parameter id...

[SECURITY] [DLA 3374-1] libmicrohttpd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3374-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 30, 2023 https://wiki.debian.org/LTS -...