n00bS3cLe4rner/CVE-s

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-46077 ↗	Oct 4, 2024Friday, 4 October 2024, 19:15	5.4 MEDIUM	—
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the val-username, val-email, val-suggestions, val-digits and state_name parameters in travellers.php.
CVE-2024-46078 ↗	Oct 4, 2024Friday, 4 October 2024, 19:15	7.5 HIGH	—
itsourcecode Sports Management System Project 1.0 is vulnerable to SQL Injection in the function delete_category of the file sports_scheduling/player.php via the argument id.
CVE-2024-42918 ↗	Aug 23, 2024Friday, 23 August 2024, 17:15	5.4 MEDIUM	—
itsourcecode Online Accreditation Management System contains a Cross Site Scripting vulnerability, which allows an attacker to execute arbitrary code via a crafted payload to the SCHOOLNAME, EMAILADDRES, CONTACTNO, COMPANYNAME and COMPANYCONTACTNO parameters in controller.php.