CVE-2024-34230

The Sourcecodester Laboratory Management System v1.0 is vulnerable to a cross-site scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation, specifically when processing the System Information parameter. An attacker can inject a crafted payload to ex...

CVE-2024-34231

A cross-site scripting (XSS) vulnerability exists in Sourcecodester Laboratory Management System v1.0 . The flaw stems from the improper neutralization of input within the System Short Name parameter, which allows an attacker to inject and execute arbitrary web scripts or HTML via a crafted paylo...

CVE-2024-33305

The SourceCodester Laboratory Management System version 1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation, specifically via the "Middle Name" parameter within the Create User function. This vulnerability allow...

CVE-2024-33307

The SourceCodester Laboratory Management System 1.0 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Specifically, the "Last Name" parameter in the Create User function can be used to inject malicious scripts. As a temporary workaroun...

CVE-2024-33306

The SourceCodester Laboratory Management System 1.0 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation, specifically through the "First Name" parameter within the Create User function. This flaw allows for potential mali...