Computer Laboratory Management System

computer_laboratory_management_system

Vendor: Oretnom23 • 30 CVEs

CVEs (30)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-3770 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Mar 8, 2026 2.1 LOW· v4 8.8 HIGH· v3 5.0 MEDIUM· v2 A flaw has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack is possible to be carried out remotely. The...Show more A flaw has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used.Show less
CVE-2025-45956 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Apr 29, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter
CVE-2024-54818 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Jan 8, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list.
CVE-2024-40443 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Nov 13, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the delete_users function in the Useres.php
CVE-2024-8348 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Aug 30, 2024 5.3 MEDIUM· v4 9.8 CRITICAL· v3 6.5 MEDIUM· v2 A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function delete_category of the file /classes/Master.php?f=dele...Show more A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function delete_category of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2024-8347 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Aug 30, 2024 5.3 MEDIUM· v4 9.8 CRITICAL· v3 6.5 MEDIUM· v2 A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0. Affected by this vulnerability is the function delete_record of the file /classes/Master.php?f=delete_record....Show more A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0. Affected by this vulnerability is the function delete_record of the file /classes/Master.php?f=delete_record. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2024-8346 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Aug 30, 2024 5.3 MEDIUM· v4 9.8 CRITICAL· v3 6.5 MEDIUM· v2 A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. Affected is the function update_settings_info of the file /classes/SystemSettings.php?f=update_settings....Show more A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. Affected is the function update_settings_info of the file /classes/SystemSettings.php?f=update_settings. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2024-41332 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Aug 12, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete categories.
CVE-2024-34480 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Aug 7, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection.
CVE-2024-34479 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Aug 7, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection.
CVE-2024-31586 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Jun 20, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks...Show more A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters.Show less
CVE-2024-35583 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 May 28, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Remarks input field.
CVE-2024-35582 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 May 28, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Department input field.
CVE-2024-35581 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 May 28, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Borrower Name input field.
CVE-2024-34225 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 May 14, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the name, shortname...Show more Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the name, shortname parameters.Show less
CVE-2024-34224 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 May 14, 2024 N/A· v4 7.3 HIGH· v3 N/A· v2 Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, mi...Show more Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters.Show less
CVE-2024-31545 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Apr 22, 2024 N/A· v4 9.4 CRITICAL· v3 N/A· v2 Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manage_user&id=6.
CVE-2024-31547 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Apr 19, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/view_item.php.
CVE-2024-31546 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Apr 19, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/view_damage.php.
CVE-2024-3695 1Oretnom23 1Computer Laboratory Management System Jun 17, 2026 Apr 12, 2024 N/A· v4 5.4 MEDIUM· v3 4.0 MEDIUM· v2 A vulnerability has been found in SourceCodester Computer Laboratory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /classes/Users.php. The manipulation of the ar...Show more A vulnerability has been found in SourceCodester Computer Laboratory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-260482 is the identifier assigned to this vulnerability.Show less

12 Next