36 matches found
CVE-2025-2652: Exposure of Information Through Directory Listing
A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. The attack can be launched...
CVE-2024-9315
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/maintenance/managedepartment.php. The manipulation of the argument id leads to sql injection. The attack may ...
CVE-2024-9315
CVE-2024-9315 affects SourceCodester Employee and Visitor Gate Pass Logging System v1.0. The issue is a SQL injection in the /admin/maintenance/manage_department.php page caused by unsafely handling the id parameter, enabling remote exploitation. Multiple sources confirm the vulnerability details...
CVE-2024-9315: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/maintenance/managedepartment.php. The manipulation of the argument id leads to sql injection. The attack may ...
CVE-2024-7069
A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects some unknown processing of the file /employeegatepass/classes/Master.php?f=deletedepartment. The manipulation of the argument id leads to sql...
CVE-2024-7069 SourceCodester Employee and Visitor Gate Pass Logging System sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects some unknown processing of the file /employeegatepass/classes/Master.php?f=deletedepartment. The manipulation of the argument id leads to sql...
CVE-2024-7069: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects some unknown processing of the file /employeegatepass/classes/Master.php?f=deletedepartment. The manipulation of the argument id leads to sql...
CVE-2024-6967
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been classified as critical. This affects an unknown part of the file /employeegatepass/admin/?page=employee/manageemployee. The manipulation of the argument id leads to sql injection. It is...
CVE-2024-6967 SourceCodester Employee and Visitor Gate Pass Logging System sql injection
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been classified as critical. This affects an unknown part of the file /employeegatepass/admin/?page=employee/manageemployee. The manipulation of the argument id leads to sql injection. It is...
CVE-2024-6967
The CVE-2024-6967 entry affects SourceCodester Employee and Visitor Gate Pass Logging System v1.0. The vulnerability arises in the endpoint /employee_gatepass/admin/?page=employee/manage_employee where the id parameter is used unsafely, leading to SQL injection. This allows remote exploitation an...
CVE-2024-6967: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been classified as critical. This affects an unknown part of the file /employeegatepass/admin/?page=employee/manageemployee. The manipulation of the argument id leads to sql injection. It is...
CVE-2024-6736 SourceCodester Employee and Visitor Gate Pass Logging System view_employee.php sql injection
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file viewemployee.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely...
CVE-2024-6736: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file viewemployee.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely...
CVE-2024-6650
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this issue is the function savedesignation of the file /classes/Master.php. The manipulation leads to cross site scripting. The attack may be launched remotely...
CVE-2024-6650
Summary: CVE-2024-6650 affects the SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Multiple connected records confirm that the vulnerability arises in the function save_designation within /classes/Master.php , enabling a cross-site scripting (XSS) condition. The attack is descri...
CVE-2024-6649 SourceCodester Employee and Visitor Gate Pass Logging System Users.php save_users cross-site request forgery
A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is the function saveusers of the file Users.php. The manipulation leads to cross-site request forgery. The attack can be launched...
CVE-2024-6649
CVE-2024-6649 affects SourceCodester Employee and Visitor Gate Pass Logging System 1.0, specifically the save_users function in Users.php, where manipulation enables cross-site request forgery. The vulnerability can be exploited remotely and has public tooling/descriptions. Exploitation details a...
CVE-2024-6649 SourceCodester Employee and Visitor Gate Pass Logging System Users.php save_users cross-site request forgery
A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is the function saveusers of the file Users.php. The manipulation leads to cross-site request forgery. The attack can be launched...
CVE-2024-6649: Cross-Site Request Forgery (CSRF)
A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is the function saveusers of the file Users.php. The manipulation leads to cross-site request forgery. The attack can be launched...
CVE-2024-6650: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this issue is the function savedesignation of the file /classes/Master.php. The manipulation leads to cross site scripting. The attack may be launched remotely...