CVE-2023-3165

CVE-2023-3165 affects SourceCodester Life Insurance Management System 1.0, specifically the insertNominee.php file under the POST Parameter Handler. The vulnerability arises from manipulating the nominee_id parameter, enabling cross-site scripting (stored XSS) that can be triggered remotely. Mult...

CVE-2023-3693

Affects SourceCodester Life Insurance Management System 1.0; vulnerable code in login.php where manipulation of the username parameter results in SQL injection. The issue is exploitable remotely and the exploit has been disclosed publicly. Multiple sources confirm the same description across CVE ...