Vulnerabilities

TI-2022-22765 CVE-2022-46096 · GHSA-qfp3-962j-hxjr

A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on…

MEDIUM 60

A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on Vaccination System v1.0 allows attackers to execute arbitrary code via the txtfullname parameter or txtphone parameter to register…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00567 Published 2022-12-21 No fix listed CWE-79

TI-2022-22764 CVE-2022-46095 · GHSA-vh5r-vrrx-j3pv

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a…

MEDIUM 60

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting (XSS) vulnerability via verification.php because the program does not verify the txtvaccinationID parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00509 Published 2022-12-21 No fix listed CWE-79

TI-2022-11219 CVE-2022-28531 · GHSA-vh29-xch9-p6vv

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection…

MEDIUM 58

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername (aka Username) field.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14582 Published 2022-05-20 No fix listed CWE-89

TI-2022-11218 CVE-2022-28530 · GHSA-446g-2w3w-mgwx

Sourcecodester Covid-19 Directory on Vaccination System 1.0 is vulnerable to SQL Injection via cmdcategory.

MEDIUM 45

Sourcecodester Covid-19 Directory on Vaccination System 1.0 is vulnerable to SQL Injection via cmdcategory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01558 Published 2022-05-05 No fix listed CWE-89

Vulnerabilities

Filters

A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on…

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a…

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection…

Sourcecodester Covid-19 Directory on Vaccination System 1.0 is vulnerable to SQL Injection via cmdcategory.