Lucene search

K

Complaint Management System Security Vulnerabilities

cve
cve

CVE-2020-24932

An SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the cid parameter in complaint-details.php.

9.8CVSS

9.8AI Score

0.003EPSS

2021-10-27 02:15 PM
19
cve
cve

CVE-2023-1984

A vulnerability classified as critical was found in SourceCodester Complaint Management System 1.0. This vulnerability affects unknown code of the file /users/check_availability.php of the component POST Parameter Handler. The manipulation of the argument email leads to sql injection. The attack ca...

9.8CVSS

9.7AI Score

0.002EPSS

2023-04-11 06:15 PM
20
cve
cve

CVE-2023-2089

A vulnerability was found in SourceCodester Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/userprofile.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. The attack m...

8.8CVSS

8.9AI Score

0.002EPSS

2023-04-15 08:15 AM
28
cve
cve

CVE-2023-2153

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/assets/plugins/DataTables/examples/examples_support/editable_ajax.php of the component POST Parameter Handler. The manipu...

6.1CVSS

5.9AI Score

0.001EPSS

2023-04-18 02:15 PM
21
cve
cve

CVE-2023-2243

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file users/registration.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection. ...

8.8CVSS

8.8AI Score

0.002EPSS

2023-04-22 05:15 PM
25
cve
cve

CVE-2024-1875

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affects some unknown processing of the file users/register-complaint.php of the component Lodge Complaint Section. The manipulation leads to unrestricted upload. The attack may be init...

6.3CVSS

6.4AI Score

0.0004EPSS

2024-02-26 04:27 PM
80
cve
cve

CVE-2024-2058

A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/product.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be la...

4.7CVSS

4.9AI Score

0.0004EPSS

2024-03-01 11:15 AM
54
cve
cve

CVE-2024-2059

A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/app/service_crud.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launch...

4.7CVSS

4.9AI Score

0.0004EPSS

2024-03-01 12:15 PM
52
cve
cve

CVE-2024-2060

A vulnerability classified as critical has been found in SourceCodester Petrol Pump Management Software 1.0. This affects an unknown part of the file /admin/app/login_crud.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit...

4.7CVSS

5.4AI Score

0.0004EPSS

2024-03-01 01:15 PM
46
cve
cve

CVE-2024-2061

A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. This vulnerability affects unknown code of the file /admin/edit_supplier.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has bee...

4.7CVSS

5.5AI Score

0.0004EPSS

2024-03-01 01:15 PM
53
cve
cve

CVE-2024-2062

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. This issue affects some unknown processing of the file /admin/edit_categories.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotel...

4.7CVSS

5.3AI Score

0.0004EPSS

2024-03-01 01:15 PM
46
cve
cve

CVE-2024-2063

A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. Affected is an unknown function of the file /admin/app/profile_crud.php. The manipulation of the argument username leads to cross site scripting. It is possible to launch the attac...

2.4CVSS

3.8AI Score

0.0004EPSS

2024-03-01 01:15 PM
46