CVE-2024-9315

CVE-2024-9315 affects SourceCodester Employee and Visitor Gate Pass Logging System v1.0. The issue is a SQL injection in the /admin/maintenance/manage_department.php page caused by unsafely handling the id parameter, enabling remote exploitation. Multiple sources confirm the vulnerability details...

CVE-2025-2652

CVE-2025-2652 concerns SourceCodester’s Employee and Visitor Gate Pass Logging System 1.0 , where an unspecified functionality allows information exposure via directory listing. The vulnerability can be exploited remotely; multiple sub-directories are affected, and an exploit has been disclosed p...

CVE-2024-6649

CVE-2024-6649 affects SourceCodester Employee and Visitor Gate Pass Logging System 1.0, specifically the save_users function in Users.php, where manipulation enables cross-site request forgery. The vulnerability can be exploited remotely and has public tooling/descriptions. Exploitation details a...

CVE-2023-2090

SourceCodester Employee and Visitor Gate Pass Logging System 1.0 is affected by a SQL injection in the /admin/maintenance/view_designation.php file where manipulating the GET parameter id leads to remote execution. The vulnerability is rooted in the GET Parameter Handler component and is triggere...

CVE-2024-5896

CVE-2024-5896 affects SourceCodester Employee and Visitor Gate Pass Logging System 1.0. The vulnerability resides in the save_users function in /classes/Users.php?f=save, where manipulation of the id parameter enables SQL injection. This can be exploited remotely and has had public exploits discl...

CVE-2024-6967

The CVE-2024-6967 entry affects SourceCodester Employee and Visitor Gate Pass Logging System v1.0. The vulnerability arises in the endpoint /employee_gatepass/admin/?page=employee/manage_employee where the id parameter is used unsafely, leading to SQL injection. This allows remote exploitation an...

CVE-2024-6736

The CVE-2024-6736 entry concerns SourceCodester Employee and Visitor Gate Pass Logging System v1.0. The vulnerability is a SQL injection in the view_employee.php component, triggered by manipulating the id parameter. The issue is exploitable remotely and has been publicly disclosed. Several conne...

CVE-2024-4921

CVE-2024-4921 affects the SourceCodester Employee and Visitor Gate Pass Logging System 1.0. The vulnerability is in an unknown function of the file /employee_gatepass/classes/Users.php?f=ssave, where manipulation of the img parameter enables unrestricted upload. This can be exploited remotely, an...

CVE-2024-5897

SourceCodester Employee and Visitor Gate Pass Logging System 1.0 is affected by a cross-site scripting (XSS) vulnerability in /classes/Master.php?f=log_visitor (or log visitor). The vulnerability arises from manipulation of the name parameter, enabling remote exploitation and is publicly disclose...

CVE-2021-46309

CVE-2021-46309 is a SQL Injection in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0, caused by improper handling of the username parameter. The PT-2022-12632 entry confirms the vulnerability exists in version 1.0 and notes an exploitation path via the username field. The CNVD/CN...

CVE-2024-5895

CVE-2024-5895 affects SourceCodester Employee and Visitor Gate Pass Logging System 1.0. The vulnerability is a SQL injection in the delete_users function (file /classes/Users.php?f=delete) triggered by manipulating the id argument. Impact is described as high for confidentiality, integrity, and a...

CVE-2024-5976

SourceCodester Employee and Visitor Gate Pass Logging System 1.0 is affected by CVE-2024-5976 in the function log_employee (file /classes/Master.php?f=log_employee). The vulnerability arises from SQL injection caused by manipulating the employee_code argument, and the issue can be exploited remot...

CVE-2024-6650

Summary: CVE-2024-6650 affects the SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Multiple connected records confirm that the vulnerability arises in the function save_designation within /classes/Master.php , enabling a cross-site scripting (XSS) condition. The attack is descri...

CVE-2024-7069

CVE-2024-7069 concerns the SourceCodester Employee and Visitor Gate Pass Logging System v1.0. Technical details from the provided documents show an SQL injection vulnerability in the code path handling /employee_gatepass/classes/Master.php?f=delete_department, triggered by manipulating the id arg...

CVE-2023-31752

CVE-2023-31752 affects SourceCodester’s Employee and Visitor Gate Pass Logging System v1.0, with a reported SQL Injection vulnerability in /employee_gatepass/classes/Login.php. The CVSSv3.1 base metrics indicate a critical impact (9.8) across confidentiality, integrity, and availability, with net...