CVE-2024-7931

CVE-2024-7931 affects SourceCodester Online Graduate Tracer System v1.0. The vulnerability is a SQL injection in the file /tracking/admin/view_csprofile.php triggered by manipulating the id parameter, exploitable remotely. Several connected sources corroborate this as a critical issue with potent...

CVE-2024-7845: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /tracking/admin/fetchit.php. The manipulation of the argument request leads to sql injection. The attack may be launched...

CVE-2024-7810: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /tracking/admin/viewitprofile.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

SourceCodester Online Graduate Tracer System 安全漏洞

SourceCodester Online Graduate Tracer System is a web-based application project developed by SourceCodester using PHP and MySQL database. Its main purpose is to provide a platform for a school to track their alumni and generate graphical reports on alumni status. A security vulnerability exists i...

PT-2024-38597 · Sourcecodester · Sourcecodester Online Graduate Tracer System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Graduate Tracer System version 1.0 Description: A critical issue affects some unknown functionality of the file /tracking/admin/view itprofile.php. The manipulation of the id argument leads to SQL injection. The attack c...

CVE-2024-7842: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Graduate Tracer System 1.0. This issue affects some unknown processing of the file /tracking/admin/exportit.php. The manipulation leads to information disclosure. The attack may be initiated remotely. Th...

CVE-2023-4737

CVE-2023-4737 is an SQL Injection vulnerability affecting Hedef Tracking Admin Panel versions prior to 1.2. The root cause is improper neutralization of special elements in SQL commands, enabling an attacker to manipulate queries. The CVSS 3.1 base score is 9.8 (Network attack, no user interactio...

CVE-2023-4737 SQLi in Hedef Trackings Admin Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This issue affects Admin Panel: before 1.2...

CVE-2023-4737: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This issue affects Admin Panel: before 1.2...

CVE-2023-1040: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file tracking/admin/addacc.php. The manipulation of the argument id leads to sql injection. The attack may be launched...