Show filters
751 Total Results
Displaying 111-120 of 751
Sort by:
Attacker Value
Unknown

CVE-2024-2069

Disclosure Date: March 01, 2024 (last updated February 26, 2025)
A vulnerability classified as critical has been found in SourceCodester FAQ Management System 1.0. Affected is an unknown function of the file /endpoint/delete-faq.php. The manipulation of the argument faq leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255384.
Attacker Value
Unknown

CVE-2024-2068

Disclosure Date: March 01, 2024 (last updated February 26, 2025)
A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /endpoint/update-computer.php. The manipulation of the argument model leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255383.
Attacker Value
Unknown

CVE-2024-2067

Disclosure Date: March 01, 2024 (last updated February 26, 2025)
A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-255382 is the identifier assigned to this vulnerability.
Attacker Value
Unknown

CVE-2024-2066

Disclosure Date: March 01, 2024 (last updated February 26, 2025)
A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255381 was assigned to this vulnerability.
Attacker Value
Unknown

CVE-2024-2065

Disclosure Date: March 01, 2024 (last updated February 26, 2025)
A vulnerability was found in SourceCodester Barangay Population Monitoring System up to 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/update-resident.php. The manipulation of the argument full_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255380.
Attacker Value
Unknown

CVE-2024-22923

Disclosure Date: February 13, 2024 (last updated February 26, 2025)
SQL injection vulnerability in adv radius v.2.2.5 allows a local attacker to execute arbitrary code via a crafted script.
Attacker Value
Unknown

CVE-2024-25302

Disclosure Date: February 09, 2024 (last updated February 26, 2025)
Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter.
Attacker Value
Unknown

CVE-2024-24496

Disclosure Date: February 08, 2024 (last updated February 26, 2025)
An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tracker.php components.
Attacker Value
Unknown

CVE-2024-24495

Disclosure Date: February 08, 2024 (last updated February 26, 2025)
SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request.
Attacker Value
Unknown

CVE-2024-24494

Disclosure Date: February 08, 2024 (last updated February 26, 2025)
Cross Site Scripting vulnerability in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via the day, exercise, pray, read_book, vitamins, laundry, alcohol and meat parameters in the add-tracker.php and update-tracker.php components.