CVE-2020-24193

The CVE-2020-24193 entry documents a SQL injection flaw in the login of Sourcecodetester Daily Tracker System 1.0 that allows an unauthenticated user to bypass authentication via the email parameter. Connected sources confirm a practical exploit path (e.g., exploit-db entry) demonstrating an auth...

CVE-2020-24194

CVE-2020-24194 is an XSS vulnerability in SourceCodester Daily Tracker System v1.0, exploitable via the fullname parameter in user-profile.php to inject arbitrary web script/HTML. The provided connected documents confirm the issue but do not specify affected versions beyond v1.0, nor provide a re...