CVE-2024-51030

Sourcecodester Cab Management System 1.0 has a SQL injection in manage_client.php and view_cab.php that can be exploited via the id parameter to execute arbitrary SQL. Affected scripts: manage_client.php, view_cab.php. Root cause: unsanitized id parameter enabling SQL injection with high confiden...

CVE-2024-5893

SourceCodester Cab Management System 1.0 is affected by a SQL injection in the /cms/classes/Users.php?f=delete_client endpoint, caused by manipulation of the id parameter in the delete_client function. Attacks can be initiated remotely, and public exploits have been disclosed. The vulnerability i...

CVE-2024-51031

CVE-2024-51031 affects Sourcecodester Cab Management System 1.0. A cross-site scripting (XSS) vulnerability exists in manage_account.php allowing remote authenticated users to inject arbitrary scripts via the First Name, Middle Name, and Last Name fields. The issue is documented across multiple f...

CVE-2026-36922

The Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection within the /cms/admin/categories/view_category.php file. This vulnerability allows for the improper neutralization of special elements used in an SQL command. While specific exploit details and remediation steps are not ...

CVE-2026-36923

The Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection within the /cms/admin/bookings/view_booking.php file. This vulnerability allows for the improper neutralization of special elements used in an SQL command. No specific exploit details or remediation instructions are provi...