CVE-2024-3419

CVE-2024-3419 affects SourceCodester Online Courseware 1.0; SQL injection via the id parameter in admin/edit.php is the root cause. The vulnerability is exploitable remotely and exploits have been publicly disclosed. No patch/version fix details are provided in the connected documents. Mitigation...

CVE-2024-3428

CVE-2024-3428 affects SourceCodester Online Courseware 1.0 in the edit.php file, where manipulation of the id parameter leads to cross-site scripting. The vulnerability is exploitable remotely, and public disclosures exist. Multiple connected sources confirm the issue and the affected component (...

CVE-2024-3418

CVE-2024-3418 affects SourceCodester Online Courseware 1.0, due to an SQL injection in admin/deactivateteach.php where the selector argument is manipulated. The vulnerability allows remote exploitation and has been publicly disclosed. Several connected sources confirm the issue and indicate the a...

CVE-2024-3425

CVE-2024-3425 affects SourceCodester Online Courseware 1.0. The vulnerability is an SQL injection in admin/activateall.php caused by manipulation of the selector parameter, enabling remote exploitation. The vulnerability is documented as publicly disclosed (exploit available). Remediation guidanc...

CVE-2024-3417

CVE-2024-3417 concerns SourceCodester Online Courseware 1.0. The vulnerability is in the admin/saveeditt.php file where manipulating the contact parameter leads to SQL injection. Attack could be remote; exploit has been disclosed publicly. Impact is described as high for confidentiality, integrit...

CVE-2024-3416

SourceCodester Online Courseware 1.0 contains a SQL injection vulnerability in admin/editt.php via the id parameter. The issue allows remote exploitation and is publicly disclosed (CVE-2024-3416, VDB-259588). Root cause: improper handling of the id argument enables SQL injection. Affected compone...

CVE-2024-3421

CVE-2024-3421 concerns SourceCodester Online Courseware 1.0, affecting the admin/deactivatestud.php file where manipulation of the selector parameter enables SQL injection. The vulnerability can be exploited remotely and has been publicly disclosed (VDB-259593). Affected software is 1.0; no offic...

CVE-2024-3420

CVE-2024-3420 affects SourceCodester Online Courseware 1.0, specifically the file admin/saveedit.php where the id parameter is injectable, leading to SQL injection. The vulnerability can be exploited remotely and exploits have been publicly disclosed. NVD lists a CVSS v3.1 base score of 9.8 (CRIT...

CVE-2024-3427

CVE-2024-3427 affects SourceCodester Online Courseware 1.0. The vulnerable component is the file addq.php where the id parameter can be manipulated to cause a cross-site scripting (XSS). Root cause: unsafely handled user input leading to XSS. Impact: potential remote exploitation; the exploit has...

CVE-2024-3423

CVE-2024-3423 affects SourceCodester Online Courseware 1.0. The issue is an SQL injection in the admin/activateteach.php file, caused by tainted manipulation of the selector argument. Exploitation is possible remotely and publicized. Multiple connected records corroborate the exact target file an...

CVE-2025-0800

CVE-2025-0800 affects SourceCodester Online Courseware 1.0, specifically the Edit Teacher component (file /pcci/admin/saveeditt.php). The vulnerability arises from manipulation of the fname argument, enabling cross-site scripting. The issue can be triggered remotely, and public exploits exist. Mu...

CVE-2024-3424

SourceCodester Online Courseware 1.0 contains a SQL injection in admin/listscore.php via the title parameter. This enables remote exploitation and is supported by multiple sources (NVD, Red Hat, CVE lists) indicating a critical vulnerability with high impact on confidentiality, integrity, and ava...

CVE-2024-3422

CVE-2024-3422 affects SourceCodester Online Courseware 1.0. The vulnerability is an SQL injection in the file admin/activatestud.php caused by unsafely manipulating the selector argument. It can be exploited remotely and has been publicly disclosed (VDB-259594). Several connected sources concur o...

CVE-2024-3426

CVE-2024-3426 affects SourceCodester Online Courseware 1.0. The vulnerability is in the editt.php file where manipulating the id parameter results in cross-site scripting (XSS). The issue can be exploited remotely and the exploit has been disclosed publicly. Root cause: insufficient input validat...