CVE-2023-1302

CVE-2023-1302 affects SourceCodester File Tracker Manager System 1.0, specifically the file normal/borrow1.php. The vulnerability is a cross-site scripting flaw caused by manipulating the id argument (example input: 1">), enabling remote initiation of the attack and with the exploit disclosed ...

CVE-2023-1294

CVE-2023-1294 affects SourceCodester File Tracker Manager System 1.0. The vulnerability arises in the POST Parameter Handler, specifically the /file_manager/login.php file, where manipulating the username parameter leads to SQL injection. It is exploitable remotely and has been publicly disclosed...