CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-8951 – SourceCodester Resort Reservation System manage_fee.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-8951
A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_fee.php. The manipulation of the argument toview leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Resort-Reservation-system-XSS.md https://vuldb.com/?ctiid.277777 https://vuldb.com/?id.277777 https://vuldb.com/?submit.409586 https://www.sourcecodester.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 2CVE-2024-8949 – SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management
https://notcve.org/view.php?id=CVE-2024-8949
A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cart_id/id leads to improper ownership management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/fa-rrel/CVE-2024-8949-POC https://github.com/gurudattch/CVEs/edit/main/Sourcecodester-Online-Eyewear-shop-webiste-Broken-access-control.md https://vuldb.com/?ctiid.277767 https://vuldb.com/?id.277767 https://vuldb.com/?submit.409459 https://www.sourcecodester.com • CWE-282: Improper Ownership Management •
CVSS: 6.9EPSS: 0%CPEs: 1EXPL: 1CVE-2024-8711 – SourceCodester Food Ordering Management System includes exposure of information through directory listing
https://notcve.org/view.php?id=CVE-2024-8711
A vulnerability, which was classified as problematic, has been found in SourceCodester Food Ordering Management System 1.0. Affected by this issue is some unknown functionality of the file /includes/. The manipulation leads to exposure of information through directory listing. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/jz-qb/cve/blob/main/dir.md https://vuldb.com/?ctiid.277220 https://vuldb.com/?id.277220 https://vuldb.com/?submit.405343 https://www.sourcecodester.com • CWE-548: Exposure of Information Through Directory Listing •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-8709 – SourceCodester Best House Rental Management System admin_class.php save_user sql injection
https://notcve.org/view.php?id=CVE-2024-8709
A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function delete_user/save_user of the file /admin_class.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/gaorenyusi/gaorenyusi/blob/main/rental1.md https://vuldb.com/?ctiid.277218 https://vuldb.com/?id.277218 https://vuldb.com/?submit.405594 https://www.sourcecodester.com • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-8708 – SourceCodester Best House Rental Management System categories.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-8708
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file categories.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. • https://vuldb.com/?ctiid.277217 https://vuldb.com/?id.277217 https://vuldb.com/?submit.404864 https://www.sourcecodester.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •