CVE-2023-2643

CVE-2023-2643 concerns the SourceCodester File Tracker Manager System 1.0. The vulnerability resides in the file register/update_password.php within the POST Parameter Handler, where modification of the argument new_password enables SQL injection. This is a network-based issue with remote exploit...

CVE-2023-2678

The CVE-2023-2678 entry concerns SourceCodester File Tracker Manager System 1.0. The vulnerability affects the file /file_manager/admin/save_user.php in the POST Parameter Handler, where manipulating the firstname parameter leads to cross-site scripting (XSS). Exploitation is remote and the explo...