CVE-2024-7756

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell...

PT-2024-38564 · Lenovo · Thinkpad L390 Yoga +1

Name of the Vulnerable Software and Affected Versions: ThinkPad L390 Yoga and 10w Notebook affected versions not specified Description: A potential issue was reported that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell. This could potentially be used to...

CVE-2024-7914

A vulnerability classified as problematic has been found in SourceCodester Yoga Class Registration System 1.0. Affected is an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the argument address leads to cross site scripting. It is possible to launch the...

CVE-2024-7914

A vulnerability classified as problematic has been found in SourceCodester Yoga Class Registration System 1.0. Affected is an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the argument address leads to cross site scripting. It is possible to launch the...

CVE-2024-7914 SourceCodester Yoga Class Registration System SystemSettings.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Yoga Class Registration System 1.0. Affected is an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the argument address leads to cross site scripting. It is possible to launch the...

CVE-2024-7914 SourceCodester Yoga Class Registration System SystemSettings.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Yoga Class Registration System 1.0. Affected is an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the argument address leads to cross site scripting. It is possible to launch the...

CVE-2024-7914

CVE-2024-7914 affects SourceCodester Yoga Class Registration System 1.0. The vulnerability is in an unknown function of /php-ycrs/classes/SystemSettings.php where manipulation of the address argument leads to cross-site scripting. It is possible to exploit remotely and public exploit details have...

PT-2024-38681 · Sourcecodester · Yoga Class Registration System

Name of the Vulnerable Software and Affected Versions: SourceCodester Yoga Class Registration System version 1.0 Description: A problematic vulnerability has been found in the system, affecting an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the address...

Yoga Class Registration System 安全漏洞

Yoga Class Registration System is a yoga class registration system by the individual developer Carlo Montero. A security vulnerability exists in Yoga Class Registration System version 1.0, which stems from a cross-site scripting attack due to manipulation of parameter addresses...

CVE-2024-7853

A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=categories/viewcategory. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

CVE-2024-7853

A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=categories/viewcategory. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

CVE-2024-7851

A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the component Add User Handler. The manipulation leads to improper authorization. The attack can be...

CVE-2024-7851

A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the component Add User Handler. The manipulation leads to improper authorization. The attack can be...

CVE-2024-7852

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/inquiries/viewinquiry.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiate...

CVE-2024-7853 SourceCodester Yoga Class Registration System sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=categories/viewcategory. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

CVE-2024-7853

CVE-2024-7853 affects SourceCodester Yoga Class Registration System (up to v1.0). The vulnerability is an SQL injection in the file /admin/?page=categories/view_category, triggered by manipulating the id parameter. It can be exploited remotely, and public disclosure of the exploit is noted. The c...

CVE-2024-7853 SourceCodester Yoga Class Registration System sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=categories/viewcategory. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

CVE-2024-7852

The CVE-2024-7852 entry describes a cross-site scripting (XSS) vulnerability in SourceCodester Yoga Class Registration System 1.0, caused by improper handling of the message argument in /admin/inquiries/view_inquiry.php. It is described as exploitable remotely over the network, with public exploi...

CVE-2024-7852 SourceCodester Yoga Class Registration System view_inquiry.php cross site scripting

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/inquiries/viewinquiry.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiate...

CVE-2024-7852 SourceCodester Yoga Class Registration System view_inquiry.php cross site scripting

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/inquiries/viewinquiry.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiate...