| CVE-2024-24141 | CRITIQUE9.8 | Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter. | 29/01/2024 |
| CVE-2024-24140 | ÉLEVÉE7.2 | Sourcecodester Daily Habit Tracker App 1.0 allows SQL Injection via the parameter 'tracker.' | 29/01/2024 |
| CVE-2024-24139 | ÉLEVÉE7.2 | Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter. | 29/01/2024 |
| CVE-2024-24136 | MOYENNE6.1 | The 'Your Name' field in the Submit Score section of Sourcecodester Math Game with Leaderboard v1.0 is vulnerable to Cross-Site Scripting (XSS) attacks. | 29/01/2024 |
| CVE-2024-24135 | MOYENNE6.1 | Product Name and Product Code in the 'Add Product' section of Sourcecodester Product Inventory with Export to Excel 1.0 are vulnerable to XSS attacks. | 29/01/2024 |
| CVE-2024-24134 | MOYENNE4.8 | Sourcecodester Online Food Menu 1.0 is vulnerable to Cross Site Scripting (XSS) via the 'Menu Name' and 'Description' fields in the Update Menu section. | 29/01/2024 |
| CVE-2023-7059 | MOYENNE5.4 | A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file log-book.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely. The exploit has been | 22/12/2023 |
| CVE-2023-6767 | MOYENNE6.1 | A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Guest e-Book 1.0. This affects an unknown part of the file /endpoint/add-guest.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of | 13/12/2023 |
| CVE-2023-6473 | MOYENNE5.4 | A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects an unknown part of the file take-quiz.php. The manipulation of the argument quiz_taker/year_section leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been d | 02/12/2023 |
| CVE-2023-6464 | CRITIQUE9.8 | A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument user leads to sql injection. The attack may be launched remotely. The exploit has been | 02/12/2023 |
| CVE-2023-6463 | MOYENNE5.4 | A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument first_name leads to cross site scripting. The attack can be launched remo | 01/12/2023 |
| CVE-2023-6462 | MOYENNE6.1 | A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unknown function of the file /endpoint/delete-user.php. The manipulation of the argument user leads to cross site scripting. It is possible to launch the attack remotely. The exploit | 01/12/2023 |
| CVE-2023-6440 | MOYENNE5.4 | A vulnerability was found in SourceCodester Book Borrower System 1.0 and classified as problematic. This issue affects some unknown processing of the file endpoint/add-book.php. The manipulation of the argument Book Title/Book Author leads to cross site scripting. The attack may be initiated remotely. The exploit has b | 30/11/2023 |
| CVE-2023-47014 | MOYENNE6.5 | A Cross-Site Request Forgery (CSRF) vulnerability in Sourcecodester Sticky Notes App Using PHP with Source Code v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to add-note.php. | 22/11/2023 |
| CVE-2023-5792 | CRITIQUE9.8 | A vulnerability has been found in SourceCodester Sticky Notes App 1.0 and classified as critical. This vulnerability affects unknown code of the file endpoint/delete-note.php. The manipulation of the argument note leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public | 26/10/2023 |
| CVE-2023-5791 | MOYENNE6.1 | A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an unknown part of the file endpoint/add-note.php. The manipulation of the argument noteTitle/noteContent leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has be | 26/10/2023 |
| CVE-2023-5790 | CRITIQUE9.8 | A vulnerability classified as critical was found in SourceCodester File Manager App 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-file.php. The manipulation of the argument uploadedFileName leads to unrestricted upload. The attack can be launched remotely. The exploit has been | 26/10/2023 |