Santhoshkumar

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function session start of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authentication. It is possible to launch the attack remotely. The exploit has been made public and could be used.

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move uploaded file of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save users of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might be used.

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move uploaded file of the file admin/add admin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save user of the file admin class.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save user of the file admin/admin class.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.