| CVE-2024-26492 | TRUNG BÌNH6.3 | An issue in Online Diagnostic Lab Management System 1.0 allows a remote attacker to gain control of a 'Staff' user account via a crafted POST request using the id, email, password, and cpass parameters. | 07/03/2024 |
| CVE-2023-33676 | CAO8.4 | Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*" which can be escalated to the remote command execution. | 07/03/2024 |
| CVE-2022-46091 | TRUNG BÌNH4.7 | Cross Site Scripting (XSS) vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter. | 07/03/2024 |
| CVE-2022-46089 | TRUNG BÌNH6.1 | Cross Site Scripting (XSS) vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter. | 07/03/2024 |
| CVE-2023-51281 | TRUNG BÌNH5.4 | Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters. | 07/03/2024 |
| CVE-2023-49987 | TRUNG BÌNH5.4 | A cross-site scripting (XSS) vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter. | 07/03/2024 |
| CVE-2023-49986 | TRUNG BÌNH4.7 | A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. | 07/03/2024 |
| CVE-2023-49977 | TRUNG BÌNH5.4 | A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customer_support/index.php?page=new_customer. | 06/03/2024 |
| CVE-2023-49976 | TRUNG BÌNH5.4 | A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customer_support/index.php?page=new_ticket. | 06/03/2024 |
| CVE-2023-49974 | TRUNG BÌNH6.1 | A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customer_support/index.php?page=customer_list. | 06/03/2024 |
| CVE-2023-49973 | TRUNG BÌNH6.1 | A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customer_support/index.php?page=customer_list. | 06/03/2024 |
| CVE-2023-49971 | TRUNG BÌNH6.1 | A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customer_support/index.php?page=customer_list. | 06/03/2024 |
| CVE-2023-33677 | CAO7.5 | Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*". | 06/03/2024 |
| CVE-2022-46088 | TRUNG BÌNH6.1 | Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the feedback form. | 05/03/2024 |
| CVE-2023-49970 | NGHIÊM TRỌNG9.8 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket. | 05/03/2024 |
| CVE-2023-49969 | TRUNG BÌNH4.3 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=edit_customer. | 05/03/2024 |
| CVE-2023-49968 | CAO7.3 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_department.php. | 05/03/2024 |
| CVE-2023-49548 | CAO8.8 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?action=save_user. | 05/03/2024 |
| CVE-2023-49547 | NGHIÊM TRỌNG9.8 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?action=login. | 05/03/2024 |
| CVE-2023-49546 | CAO8.8 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_support/ajax.php. | 05/03/2024 |