Oretnom23 Computer_laboratory_management_system
30 CVEs affecting Oretnom23 Computer_laboratory_management_system. Latest disclosed: 2026-03-08. Critical: 5, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-34480 | Critical | 9.8 | 2024-08-07 | SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection. |
CVE-2024-34479 | Critical | 9.8 | 2024-08-07 | SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection. |
CVE-2024-31546 | Critical | 9.8 | 2024-04-19 | Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/view_damage.php. |
CVE-2024-31545 | Critical | 9.4 | 2024-04-22 | Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manage_user&id=6. |
CVE-2024-31547 | Critical | 9.1 | 2024-04-19 | Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/view_item.php. |
CVE-2025-45956 | High | 8.8 | 2025-04-29 | A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arb… |
CVE-2024-54818 | High | 8.8 | 2025-01-08 | SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list. |
CVE-2024-34224 | High | 7.3 | 2024-05-14 | Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers… |
CVE-2024-3376 | High | 7.3 | 2024-04-06 | A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file con… |
CVE-2024-41332 | Medium | 6.5 | 2024-08-12 | Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-l… |
CVE-2024-8348 | Medium | 6.3 | 2024-08-30 | A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the fu… |
CVE-2024-8347 | Medium | 6.3 | 2024-08-30 | A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0. Affected by this vulnerability is the function de… |
CVE-2024-8346 | Medium | 6.3 | 2024-08-30 | A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. Affected is the function update_settings_inf… |
CVE-2024-3316 | Medium | 6.3 | 2024-04-04 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. Affected by this vulnerability is an u… |
CVE-2024-3315 | Medium | 6.3 | 2024-04-04 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been classified as critical. Affected is an unknown function of t… |
CVE-2024-3314 | Medium | 6.3 | 2024-04-04 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0 and classified as critical. This issue affects some unknown processing of… |
CVE-2024-3251 | Medium | 6.3 | 2024-04-03 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown fu… |
CVE-2024-3131 | Medium | 6.3 | 2024-04-01 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. This vulnerability affects unknown cod… |
CVE-2024-31586 | Medium | 6.1 | 2024-06-20 | A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute… |
CVE-2024-35583 | Medium | 6.1 | 2024-05-28 | A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a… |