CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3014 – SourceCodester Simple Subscription Website Actions.php sql injection
https://notcve.org/view.php?id=CVE-2024-3014
A vulnerability classified as critical has been found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file Actions.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/Viciglu/cvehub/blob/main/Simple%20Subscription%20Website%20with%20Admin%20System%20Actions.php%20has%20Sqlinjection.pdf https://vuldb.com/?ctiid.258300 https://vuldb.com/?id.258300 https://vuldb.com/?submit.305648 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2935 – SourceCodester Todo List in Kanban Board Add ToDo cross site scripting
https://notcve.org/view.php?id=CVE-2024-2935
A vulnerability, which was classified as problematic, has been found in SourceCodester Todo List in Kanban Board 1.0. Affected by this issue is some unknown functionality of the component Add ToDo. The manipulation of the argument Todo leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/To%20Do%20List%20App/To%20Do%20List%20App%20-%20Cross-Site-Scripting.md https://vuldb.com/?ctiid.258014 https://vuldb.com/?id.258014 https://vuldb.com/?submit.304678 https://www.sourcecodester.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2934 – SourceCodester Todo List in Kanban Board delete-todo.php sql injection
https://notcve.org/view.php?id=CVE-2024-2934
A vulnerability classified as critical was found in SourceCodester Todo List in Kanban Board 1.0. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete-todo.php. The manipulation of the argument list leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/To%20Do%20List%20App/To%20Do%20List%20App%20-%20SQL%20Injection.md https://vuldb.com/?ctiid.258013 https://vuldb.com/?id.258013 https://vuldb.com/?submit.304677 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2932 – SourceCodester Online Chatting System update_room.php sql injection
https://notcve.org/view.php?id=CVE-2024-2932
A vulnerability classified as critical has been found in SourceCodester Online Chatting System 1.0. Affected is an unknown function of the file admin/update_room.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/CveSecLook/cve/issues/3 https://vuldb.com/?ctiid.258012 https://vuldb.com/?id.258012 https://vuldb.com/?submit.304257 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-2930 – SourceCodester Music Gallery Site unrestricted upload
https://notcve.org/view.php?id=CVE-2024-2930
A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=save_music. The manipulation leads to unrestricted upload. • https://github.com/xuanluansec/vul/blob/main/vul/Music%20Gallery%20Site%20using%20PHP%20and%20MySQL%20Database%20Free%20Source%20Code/Music%20Gallery%20Site%20using%20PHP%20and%20MySQL%20Database%20Free%20Source%20Code.md https://vuldb.com/?ctiid.258001 https://vuldb.com/?id.258001 https://vuldb.com/?submit.304234 • CWE-434: Unrestricted Upload of File with Dangerous Type •