Vulnerabilities > Oretnom23
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-10 | CVE-2024-11054 | Unrestricted Upload of File with Dangerous Type vulnerability in Oretnom23 Simple Music Cloud Community System 1.0 A vulnerability classified as critical was found in SourceCodester Simple Music Cloud Community System 1.0. | 9.8 |
| 2024-11-08 | CVE-2024-51030 | SQL Injection vulnerability in Oretnom23 CAB Management System 1.0 A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database. | 6.5 |
| 2024-11-08 | CVE-2024-51031 | Cross-site Scripting vulnerability in Oretnom23 CAB Management System 1.0 A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "First Name," "Middle Name," and "Last Name" fields. | 5.4 |
| 2024-11-08 | CVE-2024-51032 | Cross-site Scripting vulnerability in Oretnom23 Toll TAX Management System 1.0 A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field. | 5.4 |
| 2024-11-08 | CVE-2024-10990 | SQL Injection vulnerability in Oretnom23 Online Veterinary Appointment System 1.0 A vulnerability classified as critical was found in SourceCodester Online Veterinary Appointment System 1.0. | 8.8 |
| 2024-10-25 | CVE-2024-10353 | Unspecified vulnerability in Oretnom23 Online Exam System 1.0 A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. | 7.2 |
| 2024-10-24 | CVE-2024-48427 | SQL Injection vulnerability in Oretnom23 Packers and Movers Management System 1.0 A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in /mpms/admin/?page=services/manage_service&id | 8.8 |
| 2024-10-20 | CVE-2024-10163 | SQL Injection vulnerability in Oretnom23 Sentiment Based Movie Rating System 1.0 A vulnerability was found in SourceCodester Sentiment Based Movie Rating System 1.0. | 9.8 |
| 2024-10-15 | CVE-2024-9973 | SQL Injection vulnerability in Oretnom23 Online Eyewear Shop 1.0 A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. | 9.8 |
| 2024-10-15 | CVE-2024-9974 | SQL Injection vulnerability in Oretnom23 Online Eyewear Shop 1.0 A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. | 9.8 |