CVE-2022-2812

CVE-2022-2812 affects SourceCodester Guest Management System, specifically the index.php component. The root cause is manipulation of the username/pass parameters that enables SQL injection, which can be triggered remotely. The vulnerability is described as critical (high impact to confidentialit...

CVE-2022-2813

CVE-2022-2813 affects the SourceCodester Guest Management System. The vulnerability is described as a problem in an unknown function that leads to cleartext storage of passwords in the database. Several connected sources reiterate this issue without providing product versions or exploitation deta...

CVE-2022-2847

CVE-2022-2847 affects SourceCodester Guest Management System. The vulnerability is a SQL injection in the file /guestmanagement/front.php, caused by manipulating the rid parameter. This could be exploited remotely; multiple sources note that the exploit has been disclosed publicly (VDB-206489). I...

CVE-2023-2740

SourceCodester Guest Management System 1.0 contains a cross-site scripting vulnerability in dateTest.php within the GET Parameter Handler. The root cause, as documented, is manipulation of the name argument, enabling remote execution of arbitrary scripts via crafted input. The PT-2023-21097 entry...

CVE-2022-2811

CVE-2022-2811 affects SourceCodester Guest Management System, specifically an unknown portion of myform.php where manipulating the name parameter enables cross-site scripting. The vulnerability can be triggered remotely and the exploit has been disclosed publicly. Several connected records corrob...