CVE-2024-4967

CVE-2024-4967 affects SourceCodester Interactive Map with Marker 1.0. The vulnerability is in the function handling the parameter mark at the endpoint /endpoint/delete-mark.php , where input manipulation enables SQL injection . It is described as remotely exploitable with public disclosures; mult...

CVE-2024-4968

CVE-2024-4968 affects SourceCodester Interactive Map with Marker 1.0, specifically the file/component described as Add Marker (Marker Name). The vulnerability is a cross-site scripting flaw introduced by the Add Marker functionality, which can be exploited remotely. Public disclosures exist and t...

CVE-2024-8151

CVE-2024-8151 affects SourceCodester Interactive Map with Marker 1.0. The vulnerability is a cross-site scripting in the mark parameter of /endpoint/delete-mark.php, exploitable remotely. Root cause is input manipulation of mark leading to XSS. Exploitation details are disclosed publicly in relat...