Vulnerabilities

Filters

Reset all

2 selected

30 records

Sort

Vendor: oretnom23 Component: Computer Laboratory Management System Clear all filters

TI-2026-03260 CVE-2026-3770 · GHSA-3c32-265w-v9wj

SourceCodester Computer Laboratory Management System cross-site request forgery

MEDIUM 57

A flaw has been found in SourceCodester Computer Laboratory Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0025 Published 2026-03-08 No fix listed CWE-352

TI-2025-28901 CVE-2025-45956 · GHSA-3rr5-vgfq-8c8h

A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory…

HIGH 73

A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00496 Published 2025-04-29 No fix listed CWE-89

TI-2024-36681 CVE-2024-54818 · GHSA-c26g-rhr3-gf6v

SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect…

MEDIUM 41

SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00528 Published 2025-01-08 No fix listed CWE-281

TI-2024-26924 CVE-2024-40443 · GHSA-2w8j-8xc6-4wcx

SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL…

LOW 21

SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the delete_users function in the Useres.php

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00769 Published 2024-11-13 No fix listed CWE-89

TI-2024-07741 CVE-2024-8348 · GHSA-6wr6-43m8-4jr8

SourceCodester Computer Laboratory Management System Master.php delete_category sql injection

MEDIUM 57

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0059 Published 2024-08-30 No fix listed CWE-89

TI-2024-07740 CVE-2024-8347 · GHSA-qq6c-5c4q-rj7p

SourceCodester Computer Laboratory Management System Master.php delete_record sql injection

MEDIUM 57

A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0059 Published 2024-08-30 No fix listed CWE-89

TI-2024-07739 CVE-2024-8346 · GHSA-pmv2-3483-4jqw

SourceCodester Computer Laboratory Management System SystemSettings.php update_settings_info sql injection

MEDIUM 57

A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0059 Published 2024-08-30 No fix listed CWE-89

TI-2024-27583 CVE-2024-41332 · GHSA-g3g3-23p3-c263

Incorrect access control in the delete_category function of Sourcecodester Computer…

MEDIUM 62

Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete categories.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00599 Published 2024-08-09 No fix listed CWE-284

TI-2024-22810 CVE-2024-34480 · GHSA-2pv9-pqcj-rmfm

SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection.

HIGH 82

SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00599 Published 2024-08-07 No fix listed CWE-89

TI-2024-22809 CVE-2024-34479 · GHSA-698w-c48m-rgg8

SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection.

HIGH 82

SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00698 Published 2024-08-07 No fix listed CWE-89

TI-2024-20886 CVE-2024-31586 · GHSA-7hqq-74mf-cgjh

A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management…

MEDIUM 62

A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00476 Published 2024-06-20 No fix listed CWE-79

TI-2024-23487 CVE-2024-35583

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System…

MEDIUM 60

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Remarks input field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00475 Published 2024-05-28 No fix listed CWE-79

TI-2024-23485 CVE-2024-35581

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System…

LOW 28

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00426 Published 2024-05-28 No fix listed CWE-94

TI-2024-23486 CVE-2024-35582

A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System…

MEDIUM 60

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00417 Published 2024-05-28 No fix listed CWE-79

TI-2024-22645 CVE-2024-34225 · GHSA-wfm3-g35w-6g75

Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer…

MEDIUM 60

Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the name, shortname…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00572 Published 2024-05-13 No fix listed CWE-94

TI-2024-22644 CVE-2024-34224 · GHSA-m4gv-x9wg-r7pw

Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer…

HIGH 65

Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, mi…

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00871 Published 2024-05-13 No fix listed CWE-79

TI-2024-20870 CVE-2024-31545 · GHSA-hf73-54jv-gg64

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id"…

MEDIUM 49

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manage_user&id=6.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00606 Published 2024-04-22 No fix listed CWE-89

TI-2024-20872 CVE-2024-31547 · GHSA-vpvj-x83r-f4rf

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id"…

HIGH 80

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/view_item.php.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00609 Published 2024-04-19 No fix listed CWE-89

TI-2024-20871 CVE-2024-31546 · GHSA-fr3m-v7j2-vv6p

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id"…

HIGH 82

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/view_damage.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00733 Published 2024-04-19 No fix listed CWE-89

TI-2024-03446 CVE-2024-3695 · GHSA-hcvj-cm7m-2774

SourceCodester Computer Laboratory Management System Users.php cross site scripting

MEDIUM 58

A vulnerability has been found in SourceCodester Computer Laboratory Management System 1.0 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00605 Published 2024-04-12 No fix listed CWE-79

TI-2024-20869 CVE-2024-31544 · GHSA-jw4m-rwmx-c8ph

A stored cross-site scripting (XSS) vulnerability in Computer Laboratory Management…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrower_name”, “facu…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00443 Published 2024-04-09 No fix listed CWE-79

TI-2024-03161 CVE-2024-3377 · GHSA-w6hq-2wh4-49vf

SourceCodester Computer Laboratory Management System cross site scripting

LOW 28

A vulnerability classified as problematic was found in SourceCodester Computer Laboratory Management System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00629 Published 2024-04-06 No fix listed CWE-79

TI-2024-03160 CVE-2024-3376 · GHSA-574q-w5vp-7fm6

SourceCodester Computer Laboratory Management System config.php redirect

HIGH 82

A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01337 Published 2024-04-06 No fix listed CWE-698

TI-2024-03108 CVE-2024-3316 · GHSA-hg8p-x2hq-57m9

SourceCodester Computer Laboratory Management System view_category.php sql injection

HIGH 71

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00613 Published 2024-04-04 No fix listed CWE-89

TI-2024-03107 CVE-2024-3315 · GHSA-rmrx-q6x5-whjx

SourceCodester Computer Laboratory Management System user.php sql injection

HIGH 75

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00716 Published 2024-04-04 No fix listed CWE-89