Ayush8816

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/users handler.php of the component User Registration Endpoint. This manipulation of the argument role causes improper access controls. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/users handler.php of the component User Registration Endpoint. Performing a manipulation of the argument full name results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Courseware version 1.0 **Description** A vulnerability has been found in the Edit Teacher component of the SourceCodester Online Courseware. The issue affects an unknown function of the file /pcci/admin/saveeditt.php. The manipulation of the `fname` argument leads to cross-site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For SourceCodester Online Courseware version 1.0, as a temporary workaround, consider restricting access to the /pcci/admin/saveeditt.php file until a patch is available. Avoid using the `fname` argument in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.