TI-2024-06559 CVE-2024-7080 · GHSA-rqq7-hjc5-3h3v
SourceCodester Insurance Management System direct request
Priority HIGH 70
A vulnerability was found in SourceCodester Insurance Management System 1.0.
Munyweki
Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Munyweki records in CISA KEVNo Munyweki vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records in Insurance Management System · all components
TI-2024-02000 CVE-2024-2150 · GHSA-h3pc-p5gc-rxc4
SourceCodester Insurance Management System file inclusion
Priority HIGH 65
A vulnerability, which was classified as critical, has been found in SourceCodester Insurance Management System 1.0.
TI-2024-07801 CVE-2024-8414 · GHSA-xxv6-qqx2-xg5m
SourceCodester Insurance Management System cross-site request forgery
Priority MEDIUM 64
A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic.
TI-2024-20456 CVE-2024-31063 · GHSA-x7j5-3p38-f69m
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before…
Priority MEDIUM 62
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Email input field.
TI-2024-20455 CVE-2024-31062 · GHSA-96hc-g58p-3pq7
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before…
Priority MEDIUM 61
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Street input field.
TI-2024-20900 CVE-2024-31648 · GHSA-mpx9-g5j9-p825
Cross Site Scripting (XSS) in Insurance Management System v1.0, allows remote attackers…
Priority MEDIUM 60
Cross Site Scripting (XSS) in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/new_category2.
TI-2024-20458 CVE-2024-31065 · GHSA-6gq7-9m3q-25hx
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before…
Priority MEDIUM 60
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the City input field.
TI-2024-20454 CVE-2024-31061 · GHSA-mh7w-3v8g-mcr4
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before…
Priority MEDIUM 60
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Last Name input field.
TI-2024-16979 CVE-2024-25854 · GHSA-q699-2648-qrc2
Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System…
Priority MEDIUM 60
Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket.
TI-2024-06690 CVE-2024-7225 · GHSA-7fqj-9c9j-jxcv
SourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting
Priority MEDIUM 57
A vulnerability was found in SourceCodester Insurance Management System 1.0.
TI-2024-06550 CVE-2024-7068 · GHSA-gq7v-xxv7-97xr
SourceCodester Insurance Management System update_sub_category cross site scripting
Priority MEDIUM 57
A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0.
TI-2024-20457 CVE-2024-31064 · GHSA-xhcj-9vv5-9686
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before…
Priority LOW 28
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field.