Lucene search

K
SourcecodesterLaboratory Management System

8 matches found

CVE
CVE
added 2024/05/14 3:38 p.m.79 views

CVE-2024-34230

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Information parameter.

6.1CVSS5.8AI score0.00378EPSS
CVE
CVE
added 2024/05/14 3:38 p.m.59 views

CVE-2024-34231

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Short Name parameter.

7.1CVSS5.8AI score0.00346EPSS
CVE
CVE
added 2024/05/02 2:15 p.m.43 views

CVE-2024-33305

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Middle Name" parameter in Create User.

6.1CVSS6AI score0.00094EPSS
CVE
CVE
added 2024/05/01 8:15 p.m.43 views

CVE-2024-33307

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" parameter in Create User.

5.4CVSS6AI score0.00086EPSS
CVE
CVE
added 2024/05/28 8:16 p.m.39 views

CVE-2024-35583

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Remarks input field.

6.1CVSS6AI score0.00086EPSS
CVE
CVE
added 2024/05/01 8:15 p.m.37 views

CVE-2024-33306

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" parameter in Create User.

7.4CVSS6AI score0.00102EPSS
CVE
CVE
added 2024/05/28 8:16 p.m.37 views

CVE-2024-35582

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Department input field.

6.1CVSS6AI score0.0024EPSS
CVE
CVE
added 2024/05/28 8:16 p.m.15 views

CVE-2024-35581

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Borrower Name input field.

6.1CVSS5.8AI score0.00342EPSS