CVE-2023-5581

CVE-2023-5581 affects SourceCodester Medicine Tracker System 1.0. The vulnerability is an XSS flaw in the index.php file triggered by manipulating the page parameter. Exploitation can be performed remotely, and the exploit has been disclosed publicly. Multiple sources identify the issue but do no...

CVE-2024-6419

CVE-2024-6419 describes a SQL injection in SourceCodester Medicine Tracker System 1.0, affecting unknown code path /classes/Master.php?f=save_medicine where the id parameter is manipulated to exploit the vulnerability. It is remotely exploitable and has been publicly disclosed. Multiple connected...

CVE-2023-7123

CVE-2023-7123 affects SourceCodester Medicine Tracking System 1.0. A SQL injection vulnerability exists in the handling of the /classes/Master.php? f=save_medicine path, enabling manipulation of the id/name/description parameters. The issue is network-exploitable with low attack complexity and no...

CVE-2024-6418

CVE-2024-6418 affects SourceCodester Medicine Tracker System 1.0. The vulnerability is an SQL injection in the registration path via the username parameter at /classes/Users.php?f=register_user. Root cause: improper handling/concatenation of the username leads to injection. Impact and exploitabil...

CVE-2024-7226

CVE-2024-7226 refers to a cross-site request forgery in SourceCodester Medicine Tracker System 1.0, affecting the code path /classes/Users.php?f=save_user within the Password Change Handler. The vulnerability is triggered remotely and can be exploited after a user visit, with the exploit reported...

CVE-2023-7134

CVE-2023-7134 affects SourceCodester Medicine Tracking System 1.0. A path traversal flaw exists in the page parameter (e.g., ../filedir) that can be triggered remotely. Public exploit information is available; CVSS metrics indicate high impact on confidentiality, integrity, and availability in th...