Vulnerabilities

TI-2020-14832 CVE-2020-24194 · GHSA-xmvc-mhq7-5v2v

A Cross-site scripting (XSS) vulnerability in 'user-profile.php' in SourceCodester Daily…

LOW 29

A Cross-site scripting (XSS) vulnerability in 'user-profile.php' in SourceCodester Daily Tracker System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'fullname' parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00829 Published 2020-09-09 No fix listed CWE-79

TI-2020-14831 CVE-2020-24193 · GHSA-rcpf-fw5j-h8rw

A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0…

MEDIUM 47

A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02612 Published 2020-09-03 No fix listed CWE-89

Vulnerabilities

Filters

A Cross-site scripting (XSS) vulnerability in 'user-profile.php' in SourceCodester Daily…

A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0…