4 matches found
CVE-2024-5051
CVE-2024-5051 affects SourceCodester Gas Agency Management System 1.0, with the vulnerability located in the file edituser.php. The issue arises from manipulating the id argument, leading to SQL injection. It can be exploited remotely and has been disclosed publicly. Multiple sources (NVD, CVE re...
CVE-2024-36569
CVE-2024-36569 affects Sourcecodester Gas Agency Management System v1.0. The vulnerability is described as arbitrary code execution via the editClientImage.php file. Documents indicate a high-severity issue (CVSS 8.1, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). Root cause/details are not explicitly pro...
CVE-2024-36568
Sourcecodester Gas Agency Management System v1.0 is vulnerable to SQL Injection via /gasmark/editbrand.php?id=. The root cause is unsanitized input in the id parameter, enabling attackers to manipulate queries. This vulnerability is rated critical (CVSS 3.1: 9.8) with potential impact on confiden...
CVE-2026-2009
The vulnerability CVE-2026-2009 affects SourceCodester Gas Agency Management System 1.0. It targets the file /gasmark/php_action/createUser.php, where improper access controls allow manipulation that enables unauthorized account creation. Exploitation appears remote and an exploit has been publis...