Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-11-08	CVE-2024-51030	SQL Injection vulnerability in Oretnom23 CAB Management System 1.0 A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database. network low complexity oretnom23 CWE-89	6.5
2024-11-08	CVE-2024-51031	Cross-site Scripting vulnerability in Oretnom23 CAB Management System 1.0 A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "First Name," "Middle Name," and "Last Name" fields. network low complexity oretnom23 CWE-79	5.4