8 matches found
CVE-2024-3258
CVE-2024-3258 affects SourceCodester Internship Portal Management System 1.0, specifically the admin/add_activity.php file. The issue is a SQL injection via the title/description/start/end parameters, exploitable remotely. Public disclosure exists; multiple sources reference an exploit and public...
CVE-2024-3252
SourceCodester Internship Portal Management System 1.0 contains a SQL injection in the admin/check_admin.php file triggered by the username/password parameters. The vulnerability allows remote exploitation with high impact to confidentiality, integrity, and availability; CVSSv3.1 base score up to...
CVE-2024-3253
CVE-2024-3253 affects SourceCodester Internship Portal Management System 1.0, specifically the vulnerable component in file admin/add_admin.php . The issue arises from manipulating the name/username/password parameters, enabling remote SQL injection. Multiple connected sources confirm a critical ...
CVE-2024-3254
CVE-2024-3254 affects SourceCodester Internship Portal Management System 1.0. SQL injection via the admin/edit_admin.php file’s admin_id parameter is the root cause. The issue is exploitable remotely and has public disclosures. Connected sources do not provide a confirmed patch version; one PT Se...
CVE-2024-3257
CVE-2024-3257 affects the SourceCodester Internship Portal Management System 1.0. The vulnerability is an SQL injection in the file admin/edit_activity_query.php , triggered by manipulating the arguments title , description , start , and end . The issue can be exploited remotely and is publicly d...
CVE-2024-3255
The CVE-2024-3255 entry concerns SourceCodester Internship Portal Management System version 1.0. Affected is an unknown function in admin/edit_admin_query.php where manipulating parameters username, password, name, or admin_id leads to SQL injection. Exploitation can be performed remotely, and pu...
CVE-2024-3256
CVE-2024-3256 affects SourceCodester Internship Portal Management System 1.0. The vulnerability is an SQL injection in the admin/edit_activity.php file, triggered by the activity_id parameter. It is exploitable remotely, with public disclosure noted in sources. Multiple feeds (NVD, Red Hat, CVE l...
CVE-2024-3259
CVE-2024-3259 affects SourceCodester Internship Portal Management System 1.0. The vulnerability is an SQL injection in the admin/delete_activity.php file, triggered by manipulating the activity_id parameter. It can be exploited remotely, and public exploits have been disclosed. The issue is docum...