CVE-2024-7200

CVE-2024-7200 affects SourceCodester Complaints Report Management System 1.0. The root cause is improper handling of the argument during requests to /admin/ajax.php?action=save_settings, where manipulation of the name parameter enables cross-site scripting. This could be triggered remotely, and p...

CVE-2024-7198

CVE-2024-7198 affects SourceCodester Complaints Report Management System 1.0. The vulnerability is a SQL injection in the /admin/manage_station.php file caused by unsafely manipulating the id parameter, enabling remote exploitation. Public exploits have been disclosed. No explicit fix/version is ...

CVE-2024-7199

The CVE-2024-7199 entry affects SourceCodester Complaints Report Management System 1.0, where an SQL injection is possible via the id parameter in /admin/manage_user.php. Exploitation is remote, and multiple sources report the vulnerability with public exploit disclosure. The vulnerability arises...

CVE-2024-7197

The CVE-2024-7197 entry affects SourceCodester Complaints Report Management System v1.0. Affected component: file /admin/manage_complaint.php, where manipulating the id argument leads to a SQL injection. This vulnerability can be exploited remotely and the exploit has been disclosed publicly. Imp...

CVE-2024-7196

CVE-2024-7196 affects SourceCodester Complaints Report Management System v1.0. The vulnerability is an SQL injection in the file /admin/ajax.php?action=login, triggered by manipulating the username parameter. This can be exploited remotely over the network. The issue impacts confidentiality, inte...