VYPR

Vendor CVEs

Oretnom23

All CVEs

1,064 total · sorted by risk
  • CVE-2024-34223MedMay 14, 2024
    risk 0.28cvss 4.3epss 0.00

    Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket.

  • CVE-2024-3377MedApr 6, 2024
    risk 0.28cvss 4.3epss 0.01

    A vulnerability classified as problematic was found in SourceCodester Computer Laboratory Management System 1.0. This vulnerability affects unknown code of the file /classes/SystemSettings.php?f=update_settings. The manipulation of the argument name leads to cross site…

  • CVE-2023-49969MedMar 5, 2024
    risk 0.28cvss 4.3epss 0.01

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=edit_customer.

  • CVE-2024-2151MedMar 4, 2024
    risk 0.28cvss 4.3epss 0.01

    A vulnerability classified as problematic was found in SourceCodester Online Mobile Management Store 1.0. Affected by this vulnerability is an unknown functionality of the component Product Price Handler. The manipulation of the argument quantity with the input -1 leads to…

  • CVE-2024-1970MedFeb 29, 2024
    risk 0.28cvss 4.3epss 0.01

    A vulnerability, which was classified as problematic, was found in SourceCodester Online Learning System V2 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack…

  • CVE-2023-6650MedDec 10, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability was found in SourceCodester Simple Invoice Generator System 1.0 and classified as problematic. This issue affects some unknown processing of the file login.php. The manipulation of the argument cashier leads to cross site scripting. The attack may be initiated…

  • CVE-2022-3585MedOct 18, 2022
    risk 0.28cvss 4.3epss 0.00

    A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contact_us of the component Contact Us. The manipulation leads to cross-site request forgery. It is…

  • CVE-2022-3582MedOct 18, 2022
    risk 0.28cvss 4.3epss 0.00

    A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to cross-site request forgery. The attack…

  • CVE-2022-42067MedOct 14, 2022
    risk 0.28cvss 4.3epss 0.00

    Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability

  • CVE-2026-3819LowMar 9, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability has been found in SourceCodester Resort Reservation System 1.0. The affected element is an unknown function of the file /?page=manage_reservation of the component Reservation Management Module. Such manipulation of the argument ID leads to cross site scripting.…

  • CVE-2025-14221LowDec 8, 2025
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now…

  • CVE-2025-13450LowNov 20, 2025
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f_name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been…

  • CVE-2025-3297LowApr 5, 2025
    risk 0.23cvss 3.5epss 0.00

    A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Master.php?f=save_product. The manipulation of the argument brand leads to cross site scripting. It is possible to…

  • CVE-2024-11247LowNov 15, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=save_product of the component Inventory Page. The manipulation of the…

  • CVE-2024-9906LowOct 13, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/view_inventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible…

  • CVE-2024-9299LowSep 28, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability classified as problematic has been found in SourceCodester Online Railway Reservation System 1.0. This affects an unknown part of the file /?page=reserve. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is…

  • CVE-2024-9089LowSep 23, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Modern Loan Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file update_loan_record.php. The manipulation of the argument amount leads to cross site scripting. The attack may be…

  • CVE-2024-8951LowSep 17, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_fee.php. The manipulation of the argument toview leads to cross site scripting. The attack can be…

  • CVE-2024-8583LowSep 8, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Online Bank Management System and Online Bank Management System - 1.0. It has been classified as problematic. This affects an unknown part of the file /mfeedback.php of the component Feedback Handler. The manipulation leads to cross…

  • CVE-2024-8582LowSep 8, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Food Ordering Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument description leads to cross site scripting. The attack may…

  • CVE-2024-8554LowSep 7, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Clinics Patient Management System 2.0 and classified as problematic. This issue affects some unknown processing of the file /users.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiated…

  • CVE-2024-7914LowAug 18, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability classified as problematic has been found in SourceCodester Yoga Class Registration System 1.0. Affected is an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the argument address leads to cross site scripting. It is possible…

  • CVE-2024-7852LowAug 16, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/inquiries/view_inquiry.php. The manipulation of the argument message leads to cross site scripting. The…

  • CVE-2024-7752LowAug 14, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /update_medicine.php. The manipulation of the argument medicine_name leads to cross site scripting. It is possible…

  • CVE-2024-7678LowAug 12, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=save_package. The manipulation of the argument…

  • CVE-2024-7677LowAug 12, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is the function update_settings_info of the file /classes/SystemSettings.php?f=update_settings. The manipulation of the…

  • CVE-2024-7368LowAug 1, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability has been found in SourceCodester Simple Realtime Quiz System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /ajax.php?action=save_quiz. The manipulation of the argument title leads to cross site scripting. The attack can be…

  • CVE-2024-7359LowAug 1, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_establishment. The manipulation of the argument name leads to cross…

  • CVE-2024-7285LowJul 31, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/ajax.php?action=save_settings. The manipulation of the argument name leads to cross site…

  • CVE-2024-7284LowJul 31, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability, which was classified as problematic, was found in SourceCodester Lot Reservation Management System 1.0. This affects an unknown part of the file /admin/ajax.php?action=save_settings. The manipulation of the argument about leads to cross site scripting. It is…

  • CVE-2024-7218LowJul 30, 2024
    risk 0.23cvss 3.5epss 0.01

    A flaw has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected is an unknown function of the file /admin/ajax.php?action=save_student. Executing manipulation of the argument Name can lead to cross site scripting. The attack may be performed from…

  • CVE-2024-7200LowJul 29, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability, which was classified as problematic, has been found in SourceCodester Complaints Report Management System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_settings. The manipulation of the argument name leads to cross site…

  • CVE-2024-6212LowJun 21, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function get_student of the file student_form.php. The manipulation of the argument id leads to cross site scripting. The attack may be…

  • CVE-2024-5437LowMay 29, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as problematic. Affected is the function save_category of the file /admin/index.php?page=categories. The manipulation of the argument name leads to cross site scripting. It is…

  • CVE-2024-5121LowMay 20, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Event Registration System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /registrar/?page=registration. The manipulation of the argument e leads to cross site scripting.…

  • CVE-2024-4922LowMay 16, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability, which was classified as problematic, was found in SourceCodester Simple Image Stack Website 1.0. This affects an unknown part. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has…

  • CVE-2024-3695LowApr 12, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability has been found in SourceCodester Computer Laboratory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be…

  • CVE-2024-3616LowApr 11, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability classified as problematic was found in SourceCodester Warehouse Management System 1.0. This vulnerability affects unknown code of the file pengguna.php. The manipulation of the argument admin_user/admin_nama/admin_alamat/admin_telepon leads to cross site…

  • CVE-2024-3614LowApr 11, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument nama_customer/alamat_customer/notelp_customer leads to cross site scripting. It is…

  • CVE-2024-3613LowApr 11, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file supplier.php. The manipulation of the argument nama_supplier/alamat_supplier/notelp_supplier leads to…

  • CVE-2024-3612LowApr 11, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the argument nama_barang/merek leads to cross site scripting.…

  • CVE-2024-3463LowApr 8, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability has been found in SourceCodester Laundry Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /karyawan/edit. The manipulation of the argument karyawan leads to cross site scripting. The attack can be initiated…

  • CVE-2024-3321LowApr 5, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability classified as problematic has been found in SourceCodester eLearning System 1.0. This affects an unknown part of the component Maintenance Module. The manipulation of the argument Subject Code/Description leads to cross site scripting. It is possible to initiate…

  • CVE-2024-3320LowApr 5, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability was found in SourceCodester eLearning System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument page leads to cross site scripting. The attack may be launched remotely. The identifier of…

  • CVE-2024-3140LowApr 1, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability, which was classified as problematic, was found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file /classes/Users.php?f=save. The manipulation of the argument middlename leads to cross site scripting. It is…

  • CVE-2024-2146LowMar 3, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /?p=products. The manipulation of the argument search leads to cross site scripting. The…

  • CVE-2024-2145LowMar 3, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is…

  • CVE-2024-1972LowFeb 28, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Online Job Portal 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /Employer/EditProfile.php. The manipulation of the argument Address leads to cross site scripting. The attack may be…

  • CVE-2024-1834LowFeb 23, 2024
    risk 0.23cvss 3.5epss 0.01

    A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&class_id=1. The manipulation of the argument class_date with the input…

  • CVE-2024-1031LowJan 30, 2024
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in CodeAstro Expense Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file templates/5-Add-Expenses.php of the component Add Expenses Page. The manipulation of the argument item leads to cross…