CVE-2024-34230

The Sourcecodester Laboratory Management System v1.0 is vulnerable to a cross-site scripting (XSS) flaw (CWE-79) within the System Information parameter. An attacker can inject a crafted payload to execute arbitrary web scripts or HTML, potentially leading to theft of user data or unauthorized se...

CVE-2024-34231

The Sourcecodester Laboratory Management System v1.0 contains a cross-site scripting (XSS) vulnerability. This flaw occurs because the System Short Name parameter does not properly neutralize input, allowing an attacker to execute arbitrary web scripts or HTML via a crafted payload. Practical con...

CVE-2024-33305

The SourceCodester Laboratory Management System version 1.0 is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. Specifically, a malicious script can be injected via the "Middle Name" parameter within the Create User function. This vu...

CVE-2024-33307

The SourceCodester Laboratory Management System 1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation, specifically through the "Last Name" parameter within the Create User function. This vulnerability allows for ...

CVE-2024-33306

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation, specifically through the "First Name" parameter within the Create User function. This flaw allows for the injection of m...