Oretnom23
Page 8 of 8 — Oretnom23 CVEs from a corpus of 765, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3472 | Medium | 6.3 | 2022-10-13 | A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by this issue is some unknown functionali… |
CVE-2022-3471 | Medium | 6.3 | 2022-10-13 | A vulnerability was found in SourceCodester Human Resource Management System. It has been declared as critical. Affected by this vulnerability is an unknown fu… |
CVE-2022-3470 | Medium | 6.3 | 2022-10-13 | A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affected is an unknown function of the file g… |
CVE-2022-3458 | Medium | 6.3 | 2022-10-12 | A vulnerability has been found in SourceCodester Human Resource Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2022-42250 | High | 7.2 | 2022-10-06 | Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/view_details.php?id=. |
CVE-2022-42249 | High | 7.2 | 2022-10-06 | Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/view_storage.php?id=. |
CVE-2022-42243 | High | 7.2 | 2022-10-06 | Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/manage_storage.php?id=. |
CVE-2022-42242 | High | 7.2 | 2022-10-06 | Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_booking. |
CVE-2022-42241 | High | 7.2 | 2022-10-06 | Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_message. |
CVE-2021-41434 | Medium | 5.4 | 2022-09-28 | A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of Jav… |
CVE-2022-37796 | Medium | 5.4 | 2022-09-12 | In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable to Cross Site Scripting(XSS). |
CVE-2022-3122 | Medium | 6.3 | 2022-09-05 | A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functi… |
CVE-2022-3120 | High | 7.3 | 2022-09-05 | A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an unknown functionalit… |
CVE-2022-36754 | High | 7.2 | 2022-09-02 | Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debit_credit_p. |
CVE-2022-36609 | Critical | 9.8 | 2022-09-02 | Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/update_patient.php. |
CVE-2022-36759 | Critical | 9.8 | 2022-09-02 | Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?res_id=. |
CVE-2022-3015 | Low | 3.5 | 2022-08-27 | A vulnerability, which was classified as problematic, has been found in oretnom23 Fast Food Ordering System. This issue affects some unknown processing of the… |
CVE-2022-3012 | Medium | 6.3 | 2022-08-27 | A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the fi… |
CVE-2022-36251 | Medium | 6.1 | 2022-08-22 | Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via patients.php. |
CVE-2022-35117 | Medium | 4.8 | 2022-08-17 | Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via update_medicine_details.php. This vulnerabilit… |
CVE-2022-36242 | Critical | 9.8 | 2022-08-16 | Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/update_medicine.php?id=. |
CVE-2022-36750 | Critical | 9.8 | 2022-08-10 | Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/update_user.php?id=. |
CVE-2022-36270 | Critical | 9.8 | 2022-08-10 | Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php. |
CVE-2022-2686 | Low | 3.5 | 2022-08-06 | A vulnerability, which was classified as problematic, was found in oretnom23 Fast Food Ordering System. This affects an unknown part of the component Menu List… |
CVE-2022-34067 | High | 7.5 | 2022-07-26 | Warehouse Management System v1.0 was discovered to contain a SQL injection vulnerability via the cari parameter. |
CVE-2022-2298 | High | 7.3 | 2022-07-12 | A vulnerability has been found in SourceCodester Clinics Patient Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2022-2297 | Medium | 6.3 | 2022-07-12 | A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the fi… |
CVE-2022-31354 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=get_vehicle_service. |
CVE-2022-31353 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/view_service.php?id=. |
CVE-2022-31352 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manage_service.php?id=. |
CVE-2022-31351 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 by oretnom23 has SQL injection via /ocwbs/admin/services/manage_price.php?id=. |
CVE-2022-31350 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/manage_vehicle.php?id=. |
CVE-2022-31348 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/update_status.php?id=. |
CVE-2022-31347 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle. |
CVE-2022-31346 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_service. |
CVE-2022-31345 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manage_user&id=. |
CVE-2022-31344 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_booking. |
CVE-2022-31343 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/view_details&id=. |
CVE-2022-31342 | Medium | 6.5 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to Delete any file via /ocwbs/classes/Master.php?f=delete_img. |
CVE-2022-29651 | High | 7.2 | 2022-05-25 | An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafte… |
CVE-2022-29650 | Critical | 9.8 | 2022-05-25 | Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php. |
CVE-2022-30837 | Medium | 5.4 | 2022-05-24 | Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting (XSS) via /ttms/classes/Master.php?f=save_recipient, vehicle_name. |
CVE-2022-30053 | Critical | 9.8 | 2022-05-17 | In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks. |
CVE-2022-28026 | Critical | 9.8 | 2022-04-21 | Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=student_p&id=. |
CVE-2022-28025 | Critical | 9.8 | 2022-04-21 | Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=school_year. |
CVE-2022-28024 | Critical | 9.8 | 2022-04-21 | Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade. |
CVE-2022-27304 | Critical | 9.8 | 2022-04-05 | Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter. |
CVE-2022-26646 | Critical | 9.8 | 2022-03-30 | Online Banking System Protect v1.0 was discovered to contain a local file inclusion (LFI) vulnerability via the pages parameter. |
CVE-2022-26645 | Critical | 9.8 | 2022-03-30 | A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded th… |
CVE-2022-26644 | Medium | 6.1 | 2022-03-30 | Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via parameters on user profile, system_info an… |
CVE-2022-26283 | Critical | 9.8 | 2022-03-21 | Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the view_plan endpoint. This vulnerability all… |
CVE-2021-45435 | Critical | 9.8 | 2022-01-28 | An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php. |
CVE-2021-41659 | Critical | 9.8 | 2022-01-24 | SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username or password f… |
CVE-2021-40596 | Critical | 9.8 | 2022-01-24 | SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the f… |
CVE-2021-40247 | Critical | 9.8 | 2022-01-21 | SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the use… |
CVE-2021-46309 | Critical | 9.8 | 2022-01-21 | An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter. |
CVE-2021-46200 | Critical | 9.8 | 2022-01-21 | An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php. |
CVE-2021-44600 | High | 7.5 | 2021-12-23 | The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injection attacks through the password paramete… |
CVE-2021-45252 | Critical | 9.8 | 2021-12-21 | Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are manage_topic.php, manage_use… |
CVE-2021-44653 | Critical | 9.8 | 2021-12-15 | Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL i… |
CVE-2021-42580 | Critical | 9.8 | 2021-11-15 | Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file (/admin/login.php) and authenticated file up… |
CVE-2021-43141 | Medium | 6.1 | 2021-11-03 | Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in plan_application. |
CVE-2021-43140 | Critical | 9.8 | 2021-11-03 | SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login. |
CVE-2021-41645 | High | 8.8 | 2021-10-29 | Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrar… |
CVE-2021-41644 | Critical | 9.8 | 2021-10-29 | Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image up… |