Oretnom23

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-26492 1Oretnom23 1Online Diagnostic Lab Management System Jun 17, 2026 Mar 7, 2024 N/A· v4 6.3 MEDIUM· v3 N/A· v2 An issue in Online Diagnostic Lab Management System 1.0 allows a remote attacker to gain control of a 'Staff' user account via a crafted POST request using the id, email, password, and cpass parameters.
CVE-2023-33676 1Oretnom23 1Lost And Found Information System Jun 17, 2026 Mar 7, 2024 N/A· v4 8.4 HIGH· v3 N/A· v2 Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*" which can be escalated to the remote command execution.
CVE-2022-46091 1Oretnom23 1Online Flight Booking Management System Jun 17, 2026 Mar 7, 2024 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Cross Site Scripting (XSS) vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline para...Show more Cross Site Scripting (XSS) vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter.Show less
CVE-2022-46089 1Oretnom23 1Online Flight Booking Management System Jun 17, 2026 Mar 7, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross Site Scripting (XSS) vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline p...Show more Cross Site Scripting (XSS) vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter.Show less
CVE-2023-51281 1Oretnom23 1Customer Support System Jun 17, 2026 Mar 7, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters.
CVE-2023-49987 1Oretnom23 1School Fees Management System Jun 17, 2026 Mar 7, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname p...Show more A cross-site scripting (XSS) vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter.Show less
CVE-2023-49986 1Oretnom23 1School Fees Management System Jun 17, 2026 Mar 7, 2024 N/A· v4 4.7 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name paramet...Show more A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.Show less
CVE-2023-49977 1Oretnom23 1Customer Support System Jun 17, 2026 Mar 6, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customer_support/index.php?...Show more A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customer_support/index.php?page=new_customer.Show less
CVE-2023-49976 1Oretnom23 1Customer Support System Jun 17, 2026 Mar 6, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customer_support/index.php?...Show more A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customer_support/index.php?page=new_ticket.Show less
CVE-2023-49974 1Oretnom23 1Customer Support System Jun 17, 2026 Mar 6, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customer_support/index.php?...Show more A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customer_support/index.php?page=customer_list.Show less
CVE-2023-49973 1Oretnom23 1Customer Support System Jun 17, 2026 Mar 6, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customer_support/index.php?pa...Show more A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customer_support/index.php?page=customer_list.Show less
CVE-2023-49971 1Oretnom23 1Customer Support System Jun 17, 2026 Mar 6, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customer_support/index.ph...Show more A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customer_support/index.php?page=customer_list.Show less
CVE-2023-33677 1Oretnom23 1Lost And Found Information System Jul 9, 2026 Mar 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*".
CVE-2022-46088 1Oretnom23 1Online Flight Booking Management System Jun 17, 2026 Mar 5, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the feedback form.
CVE-2023-49970 1Oretnom23 1Customer Support System Jun 17, 2026 Mar 5, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket.
CVE-2023-49969 1Oretnom23 1Customer Support System Jun 17, 2026 Mar 5, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=edit_customer.
CVE-2023-49968 1Oretnom23 1Customer Support System Jun 17, 2026 Mar 5, 2024 N/A· v4 7.3 HIGH· v3 N/A· v2 Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_department.php.
CVE-2023-49548 1Oretnom23 1Customer Support System Jun 17, 2026 Mar 5, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?action=save_user.
CVE-2023-49547 1Oretnom23 1Customer Support System Jun 17, 2026 Mar 5, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customer_support/ajax.php?action=login.
CVE-2023-49546 1Oretnom23 1Customer Support System Jun 17, 2026 Mar 5, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_support/ajax.php.

Previous 1...222324...39 Next