Search Results (7 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-24932 1 Razormist 1 Complaint Management System 2026-03-06 9.8 Critical
An SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the cid parameter in complaint-details.php.
CVE-2022-31294 1 Razormist 1 Online Discussion Forum Site 2025-04-22 6.5 Medium
An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts.
CVE-2022-31295 1 Razormist 1 Online Discussion Forum Site 2025-04-22 7.5 High
An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.
CVE-2022-31911 1 Razormist 1 Online Discussion Forum Site 2025-04-22 7.2 High
Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=delete_team.
CVE-2022-31913 1 Razormist 1 Online Discussion Forum Site 2025-04-22 4.8 Medium
Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes/Master.php?f=save_category, name.
CVE-2022-2666 1 Razormist 1 Loan Management System 2024-11-26 6.3 Medium
A vulnerability has been found in SourceCodester Loan Management System and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205618 is the identifier assigned to this vulnerability.
CVE-2020-29215 1 Razormist 1 Employee Management System 2024-11-21 5.4 Medium
A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management System/addemp.php on admin account.