Filtered by vendor Sourcecodester
Subscriptions
Total
251 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2024-7845 | 2 Sourcecodester, Tamparongj03 | 2 Online Graduate Tracer System, Online Graduate Tracer System | 2025-02-18 | 6.3 Medium |
| A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /tracking/admin/fetch_it.php. The manipulation of the argument request leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. | ||||
| CVE-2024-7843 | 2 Sourcecodester, Tamparongj03 | 2 Online Graduate Tracer System, Online Graduate Tracer System | 2025-02-18 | 5.3 Medium |
| A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file /tracking/admin/exportcs.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. | ||||
| CVE-2024-7931 | 2 Sourcecodester, Tamparongj03 | 2 Online Graduate Tracer System, Online Graduate Tracer System | 2025-02-18 | 6.3 Medium |
| A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects some unknown processing of the file /tracking/admin/view_csprofile.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. | ||||
| CVE-2024-7842 | 2 Sourcecodester, Tamparongj03 | 2 Online Graduate Tracer System, Online Graduate Tracer System | 2025-02-18 | 5.3 Medium |
| A vulnerability, which was classified as problematic, has been found in SourceCodester Online Graduate Tracer System 1.0. This issue affects some unknown processing of the file /tracking/admin/export_it.php. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. | ||||
| CVE-2024-7949 | 2 Sourcecodester, Tamparongj03 | 2 Online Graduate Tracer System, Online Graduate Tracer System | 2025-02-18 | 6.3 Medium |
| A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetch_genderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. | ||||
| CVE-2024-36569 | 1 Sourcecodester | 1 Gas Agency Management System | 2025-02-13 | 8.1 High |
| Sourcecodester Gas Agency Management System v1.0 is vulnerable to arbitrary code execution via editClientImage.php. | ||||
| CVE-2024-36568 | 1 Sourcecodester | 1 Gas Agency Management System | 2025-02-13 | 9.8 Critical |
| Sourcecodester Gas Agency Management System v1.0 is vulnerable to SQL Injection via /gasmark/editbrand.php?id=. | ||||
| CVE-2024-35583 | 1 Sourcecodester | 1 Laboratory Management System | 2025-02-13 | 6.1 Medium |
| A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Remarks input field. | ||||
| CVE-2024-35582 | 1 Sourcecodester | 1 Laboratory Management System | 2025-02-13 | 6.1 Medium |
| A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Department input field. | ||||
| CVE-2024-35581 | 1 Sourcecodester | 1 Laboratory Management System | 2025-02-13 | 6.1 Medium |
| A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Borrower Name input field. | ||||
| CVE-2024-35469 | 1 Sourcecodester | 1 Human Resource Management System | 2025-02-13 | 9.8 Critical |
| A SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter. | ||||
| CVE-2024-35468 | 1 Sourcecodester | 1 Human Resource Management System | 2025-02-13 | 5.4 Medium |
| A SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter. | ||||
| CVE-2024-34231 | 1 Sourcecodester | 1 Laboratory Management System | 2025-02-13 | 7.1 High |
| A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Short Name parameter. | ||||
| CVE-2024-34230 | 1 Sourcecodester | 1 Laboratory Management System | 2025-02-13 | 6.1 Medium |
| A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Information parameter. | ||||
| CVE-2024-34224 | 1 Sourcecodester | 1 Computer Laboratory Management System | 2025-02-13 | 7.3 High |
| Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters. | ||||
| CVE-2024-34223 | 1 Sourcecodester | 1 Human Resource Management System | 2025-02-13 | 4.3 Medium |
| Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket. | ||||
| CVE-2024-34222 | 1 Sourcecodester | 1 Human Resource Management System | 2025-02-13 | 5.9 Medium |
| Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter. | ||||
| CVE-2024-34221 | 1 Sourcecodester | 1 Human Resource Management System | 2025-02-13 | 8.8 High |
| Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation. | ||||
| CVE-2024-34220 | 1 Sourcecodester | 1 Human Resource Management System | 2025-02-13 | 7.5 High |
| Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter. | ||||
| CVE-2024-4925 | 2 Oretnom23, Sourcecodester | 2 School Intramurals - Student Attendance Management System, School Instramurals | 2025-02-10 | 6.3 Medium |
| A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /intrams_sams/manage_course.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264461 was assigned to this vulnerability. | ||||