Vulnerabilities > Oretnom23 > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-12-08 | CVE-2023-6616 | Unspecified vulnerability in Oretnom23 Simple Student Attendance System 1.0 A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. | 6.1 |
| 2023-10-15 | CVE-2023-5585 | Unspecified vulnerability in Oretnom23 Online Motorcycle (Bike) Rental System 1.0 A vulnerability was found in SourceCodester Online Motorcycle Rental System 1.0. | 6.1 |
| 2023-10-14 | CVE-2023-5581 | Unspecified vulnerability in Oretnom23 Medicine Tracker System 1.0 A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. | 6.1 |
| 2023-09-29 | CVE-2023-5286 | Unspecified vulnerability in Oretnom23 Expense Tracker 1.0 A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. | 5.4 |
| 2023-09-27 | CVE-2023-44048 | Cross-site Scripting vulnerability in Oretnom23 Expense Tracker 1.0 Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting (XSS) via add category. | 5.4 |
| 2023-09-25 | CVE-2023-43456 | Cross-site Scripting vulnerability in Oretnom23 Service Provider Management System 1.0 Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename and lastname parameters in the /php-spms/admin/?page=user endpoint. | 5.4 |
| 2023-09-17 | CVE-2023-5021 | Unspecified vulnerability in Oretnom23 AC Repair and Services System 1.0 A vulnerability, which was classified as problematic, was found in SourceCodester AC Repair and Services System 1.0. | 6.1 |
| 2023-08-23 | CVE-2023-36317 | Cross-site Scripting vulnerability in Oretnom23 Student Study Center Desk Management System 1.0 Cross Site Scripting (XSS) vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL. | 4.8 |
| 2023-08-04 | CVE-2023-36159 | Cross-site Scripting vulnerability in Oretnom23 Lost and Found Information System 1.0 Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page. | 6.1 |
| 2023-07-13 | CVE-2023-3659 | Unspecified vulnerability in Oretnom23 AC Repair and Services System 1.0 A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as problematic. | 6.1 |