CVE-2024-40072

CVE-2024-40072 affects Sourcecodester Online ID Generator System 1.0. It contains a SQL injection vulnerability in the id parameter (id_generator/admin/?page=generate/index&id=1). The CVE entry lists a base score of 9.8 (CRITICAL) with NETWORK attack vector, no privileges required, and no user in...

CVE-2024-40074

CVE-2024-40074 affects SourceCodester Online ID Generator System 1.0. The flaw is a Stored Cross-Site Scripting (XSS) vulnerability in id_generator/classes/SystemSettings.php?f=update_settings, with the point of vulnerability in the POST parameter short_name. CVSSv3.1 base score 4.8 (MEDIUM), net...

CVE-2024-40073

SourceCodester Online ID Generator System 1.0 is affected by a SQL injection vulnerability in the template parameter of id_generator/admin/?page=generate&template=4. The root cause is improper input handling leading to injection, exposing high-risk impact on confidentiality, integrity, and availa...

CVE-2024-40070

CVE-2024-40070 affects Sourcecodester Online ID Generator System 1.0. The issue is an arbitrary file upload vulnerability at id_generator/classes/Users.php?f=save that allows an attacker to execute arbitrary PHP code by uploading a crafted file. The connected documents provide concrete details ab...

CVE-2024-40071

CVE-2024-40071 affects Sourcecodester Online ID Generator System 1.0. The vulnerability is an arbitrary file upload via id_generator/classes/SystemSettings.php?f=update_settings that allows execution of arbitrary PHP code. CVSS 3.1 metrics indicate NETWORK/vector, HIGH impact on confidentiality, ...

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 is affected by a Stored Cross-Site Scripting (XSS) flaw in id_generator/classes/Users.php?f=save, triggered by the POST parameters firstname and lastname. Root cause is unescaped user input leading to script execution in the context of authenticated/u...

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 contains a SQL injection in the id parameter of id_generator/admin/?page=templates/manage_template&id=1. Root cause: improper handling of user input leading to SQL injection. Impact per available metrics is Confidentiality/Integrity/Availability Low w...