4 matches found
CVE-2022-3579
The CVE concerns SourceCodester Cashier Queuing System 1.0, specifically the Login Page component at /queuing/login.php. The vulnerability arises from manipulation of the username/password parameters, enabling SQL injection. It is described as remote and publicly disclosed, with the VDB-211186 id...
CVE-2022-3580
CVE-2022-3580 affects SourceCodester Cashier Queuing System 1.0.1 and is linked to the User Creation Handler component. The issue arises from unknown processing in that handler, enabling cross-site scripting. The vulnerability can be exploited remotely, with no exploitation specifics or patch det...
CVE-2022-3581
CVE-2022-3581 affects SourceCodester Cashier Queuing System 1.0, specifically the Cashiers Tab’s Name parameter. The vulnerability is a cross-site scripting (XSS) flaw enabled by manipulating this argument, with remote exploitation reported. Several sources (NVD/Red Hat/PRION/CNNVD/CVE records) c...
CVE-2025-8973
Summary: CVE-2025-8973 affects SourceCodester Cashier Queuing System 1.0. Affected component: the unknown function in the file /Actions.php where manipulating the Username argument leads to a SQL injection. The vulnerability appears exploitable remotely and has public disclosure. Root cause: impr...