CVE-2024-2068

CVE-2024-2068 affects SourceCodester Computer Inventory System 1.0. The vulnerability is a cross-site scripting issue in the endpoint /endpoint/update-computer.php triggered by manipulating the model parameter, with remote attack potential. Multiple sources confirm the flaw and its public disclos...

CVE-2024-2066

CVE-2024-2066 affects SourceCodester Computer Inventory System 1.0, with a Cross-Site Scripting (XSS) flaw in /endpoint/add-computer.php triggered via the model argument. The root cause is input manipulation that leads to XSS, allowing remote initiation. Several connected sources confirm the vuln...

CVE-2024-2067

SourceCodester Computer Inventory System 1.0 has a SQL injection vulnerability in /endpoint/delete-computer.php triggered by manipulating the computer parameter. The flaw is exploitable remotely and is considered critical by CVE-2024-2067; multiple sources report the exploit publicly. No official...