Joshua Lictan

A critical issue has been found in the SourceCodester File Manager App, affecting the /endpoint/update-file.php file. The manipulation of the `file` argument leads to unrestricted upload. This issue can be exploited remotely.

A critical issue affects the processing of the file /task-details.php, leading to execution after redirect. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical vulnerability was found in the SourceCodester Employee Task Management System. This issue affects unknown code of the file /manage-admin.php, leading to execution after redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical vulnerability was found in the SourceCodester Employee Task Management System. This issue affects an unknown part of the file /update-admin.php. The manipulation of the `admin id` argument leads to authorization bypass. It is possible to initiate the attack remotely.

A critical vulnerability was found in the SourceCodester Employee Task Management System, affecting some unknown functionality of the file /admin-manage-user.php. The manipulation leads to execution after redirect, and the attack may be launched remotely. The exploit has been disclosed to the public and may be used.

A critical vulnerability was found in the SourceCodester Employee Task Management System, affecting an unknown part of the file /edit-task.php. The manipulation leads to execution after redirect and can be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical issue has been found in the system, affecting some unknown functionality of the file /task-details.php. The manipulation of the `task id` argument leads to authorization bypass. This issue can be exploited remotely.

A critical vulnerability was found in the SourceCodester Employee Task Management System, affecting an unknown functionality of the file /edit-task.php. The manipulation of the `task id` argument leads to authorization bypass. The attack can be launched remotely.

A critical vulnerability has been found in the SourceCodester Employee Task Management System. This issue affects the file /update-employee.php and is related to the manipulation of the `admin id` argument, leading to authorization bypass. The attack can be initiated remotely.

A critical vulnerability has been found in the SourceCodester Employee Task Management System. The issue affects an unknown function of the file /task-info.php, leading to execution after redirect. This can be exploited remotely.

A problematic issue was found in the system, affecting an unknown function of the file navbar.php. The manipulation of the `id` argument leads to cross-site scripting. This issue can be exploited remotely.

A problematic issue has been found in the system, affecting some unknown functionality of the file home.php. The manipulation of the `id` argument leads to cross-site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond.

A critical issue has been found in the file book history.php, where the manipulation of the `del id` argument leads to sql injection. The attack can be initiated remotely. The issue has been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond.

A vulnerability was found in the processing of the file book history.php, where the manipulation of the `id` argument leads to cross-site scripting. The attack may be initiated remotely. The vendor was contacted about this disclosure but did not respond.

A critical issue was found in the system, affecting an unknown part of the file home.php. The manipulation of the `id` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A critical issue was found in the system, affecting an unknown functionality of the file /admin/bookdate.php. The manipulation of the `room id` argument leads to SQL injection. This issue can be exploited remotely.

A critical vulnerability was found in the system, affecting an unknown functionality of the file /admin/update-users.php. The manipulation of the `id` argument leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A critical issue affects the unknown code of the file /admin/rooms.php, leading to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A critical issue was found in the system, affecting some unknown functionality of the file /admin/rooms.php. The manipulation of the `room id` argument leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

A critical issue was found in the system, affecting an unknown part of the file /admin/update-rooms.php. The manipulation of the `room id` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.