CVE-2024-7279

SourceCodester Lot Reservation Management System 1.0 contains a SQL injection vulnerability in the login endpoint /admin/ajax.php?action=login. The username parameter is unsafely handled, enabling remote exploitation with no privileges required and no user interaction. The vulnerability is public...

CVE-2024-7281

CVE-2024-7281 affects SourceCodester Lot Reservation Management System 1.0. The vulnerability is a SQL injection in a vulnerability in the file /admin/index.php?page=manage_lot (often described as /admin/index.php?page=manage lot) caused by improper handling of the id argument, allowing remote ex...

CVE-2024-7224

CVE-2024-7224 concerns SourceCodester Lot Reservation Management System 1.0. The vulnerability is in the /lot_details.php file where manipulating the id argument leads to a SQL injection. The issue can be exploited remotely, and public exploit information is available. Connected documents do not ...

CVE-2024-7280

CVE-2024-7280 affects SourceCodester Lot Reservation Management System 1.0. A SQL injection vulnerability exists in /admin/view_reserved.php caused by unsafely handling the id parameter, potentially exploitable remotely. The exploit has been publicized. Connected sources indicate a workaround: av...

CVE-2024-7284

CVE-2024-7284 affects SourceCodester Lot Reservation Management System 1.0. The vulnerability exists in the /admin/ajax.php?action=save_settings endpoint where manipulation of the about parameter enables cross-site scripting. Exploitation can be performed remotely, and public disclosures of the e...

CVE-2024-7223

CVE-2024-7223 affects SourceCodester Lot Reservation Management System 1.0. A SQL injection vulnerability exists in the /view_model.php file, caused by unsafely handling the id parameter. The vulnerability can be exploited remotely, and public exploits have been disclosed. Remediation details are...

CVE-2024-7222

CVE-2024-7222 affects SourceCodester Lot Reservation Management System 1.0. The vulnerability is in an unknown function of the file /home.php, where manipulation of the parameter named type leads to SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. Multiple ...

CVE-2024-7282

CVE-2024-7282 affects SourceCodester Lot Reservation Management System 1.0. The vulnerability is a SQL injection in an unknown-functionality path of the file /admin/manage_model.php, caused by manipulation of the id parameter. It can be exploited remotely and the exploit has been publicly disclos...

CVE-2024-7283

CVE-2024-7283 affects SourceCodester Lot Reservation Management System 1.0, where the vulnerability is in the admin/manage_user.php functionality. The issue arises from manipulating the id parameter, leading to SQL injection. Impact is described as high for confidentiality, integrity, and availab...