4 matches found
CVE-2024-3797
CVE-2024-3797 affects SourceCodester QR Code Bookmark System 1.0. The issue is an SQL injection in the /endpoint/delete-bookmark.php?bookmark=1 parameter, enabling remote attacker execution via the bookmark argument. There is public disclosure of the exploit. Affected component is the delete-book...
CVE-2024-8153
CVE-2024-8153 affects SourceCodester QR Code Bookmark System 1.0. The vulnerability is a cross-site scripting flaw in the bookmark parameter of /endpoint/delete-bookmark.php, exploitable remotely and reported publicly. Multiple sources confirm the issue, with remediation guidance recommending upg...
CVE-2024-8154
The CVE-2024-8154 issue affects SourceCodester QR Code Bookmark System 1.0. Affected is the unknown function in /endpoint/update-bookmark.php (Parameter Handler). Manipulating the arguments tbl_bookmark_id, name, or url leads to cross-site scripting. Attacks can be launched remotely, and the expl...
CVE-2024-8152
SourceCodester QR Code Bookmark System 1.0 is affected by CVE-2024-8152 through the /endpoint/add-bookmark.php Parameter Handler. The vulnerability arises from manipulating the name/url argument, enabling cross-site scripting (XSS). Exploitation can be performed remotely, and the exploit has been...