← Back

Oretnom23

oretnom23

761 CVEs • 112 products

Products (112)

Click to collapse
Toggle

CVEs (761)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Oretnom23
1Product Show Room Site
Jun 17, 2026
May 2, 2024
N/A· v4
8.2 HIGH· v3
N/A· v2
SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" under Add Users.
1Oretnom23
1Product Show Room Site
Jun 17, 2026
May 2, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting (XSS) via "Middle Name" under Add Users.
1Oretnom23
1Product Show Room Site
Jun 17, 2026
May 1, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" under Add Users.
1Oretnom23
1Employees Payroll Management System
Jun 17, 2026
May 1, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross site scripting (XSS) vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, from_date and to_date inputs in file Main.php...Show more
Cross site scripting (XSS) vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, from_date and to_date inputs in file Main.php.Show less
1Oretnom23
1Pos Point Of Sale System
Jun 17, 2026
May 1, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting (XSS) vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to execute arbitrary code via the code, name, and description inputs in file Main.php.
1Oretnom23
1Blog Site
Jun 17, 2026
May 1, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross site scripting (XSS) vulnerability in file main.php in sourcecodester oretnom23 Blog Site 1.0 via the name and email parameters to function user_add.\
1Oretnom23
1Employee Task Management System
Jun 17, 2026
Apr 25, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php.
1Oretnom23
1Simple Subscription Website
Jun 17, 2026
Apr 24, 2024
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
A vulnerability, which was classified as critical, was found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file view_application.php. The manipulation of the argument id leads...Show more
A vulnerability, which was classified as critical, was found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file view_application.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-261822 is the identifier assigned to this vulnerability.Show less
1Oretnom23
1Computer Laboratory Management System
Jun 17, 2026
Apr 22, 2024
N/A· v4
9.4 CRITICAL· v3
N/A· v2
Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manage_user&id=6.
1Oretnom23
1Computer Laboratory Management System
Jun 17, 2026
Apr 19, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/view_item.php.
1Oretnom23
1Computer Laboratory Management System
Jun 17, 2026
Apr 19, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/view_damage.php.
1Oretnom23
1Cosmetics And Beauty Product Online Store
Jun 17, 2026
Apr 15, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter.
1Oretnom23
1Cosmetics And Beauty Product Online Store
Jun 17, 2026
Apr 15, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter.
1Oretnom23
1Cosmetics And Beauty Product Online Store
Jun 17, 2026
Apr 15, 2024
N/A· v4
9.6 CRITICAL· v3
N/A· v2
A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter.
1Oretnom23
1Cosmetics And Beauty Product Online Store
Jun 17, 2026
Apr 15, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter.
1Oretnom23
1Computer Laboratory Management System
Jun 17, 2026
Apr 12, 2024
N/A· v4
5.4 MEDIUM· v3
4.0 MEDIUM· v2
A vulnerability has been found in SourceCodester Computer Laboratory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /classes/Users.php. The manipulation of the ar...Show more
A vulnerability has been found in SourceCodester Computer Laboratory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-260482 is the identifier assigned to this vulnerability.Show less
1Oretnom23
1Warehouse Management System
Jun 17, 2026
Apr 11, 2024
N/A· v4
5.4 MEDIUM· v3
4.0 MEDIUM· v2
A vulnerability classified as problematic was found in SourceCodester Warehouse Management System 1.0. This vulnerability affects unknown code of the file pengguna.php. The manipulation of the argument admin_user/admin_n...Show more
A vulnerability classified as problematic was found in SourceCodester Warehouse Management System 1.0. This vulnerability affects unknown code of the file pengguna.php. The manipulation of the argument admin_user/admin_nama/admin_alamat/admin_telepon leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-260272.Show less
1Oretnom23
1Warehouse Management System
Jun 17, 2026
Apr 11, 2024
N/A· v4
5.4 MEDIUM· v3
4.0 MEDIUM· v2
A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument nama_customer/alamat_cus...Show more
A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument nama_customer/alamat_customer/notelp_customer leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260271.Show less
1Oretnom23
1Warehouse Management System
Jun 17, 2026
Apr 11, 2024
N/A· v4
5.4 MEDIUM· v3
4.0 MEDIUM· v2
A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file supplier.php. The manipulation of the argume...Show more
A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file supplier.php. The manipulation of the argument nama_supplier/alamat_supplier/notelp_supplier leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-260270 is the identifier assigned to this vulnerability.Show less
1Oretnom23
1Warehouse Management System
Jun 17, 2026
Apr 11, 2024
N/A· v4
5.4 MEDIUM· v3
4.0 MEDIUM· v2
A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the...Show more
A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the argument nama_barang/merek leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260269 was assigned to this vulnerability.Show less