Oretnom23
Oretnom23 Computer Laboratory Management System: vulnerabilidades y CVE
Oretnom23 Computer Laboratory Management System tiene 30 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 8 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE30
Últimos 12 meses1
Críticas8
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-3770 | Baja (2.1) | 0.30% | — | 8 mar 2026 | A flaw has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack is possible to be carried out remotely.… |
| CVE-2025-45956 | Alta (8.8) | 0.49% | — | 29 abr 2025 | A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter |
| CVE-2024-54818 | Alta (8.8) | 0.51% | — | 8 ene 2025 | SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list. |
| CVE-2024-40443 | Media (4.3) | 0.77% | — | 13 nov 2024 | SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the delete_users function in the Useres.php |
| CVE-2024-8348 | Media (5.3) | 0.59% | — | 30 ago 2024 | A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function delete_category of the file… |
| CVE-2024-8347 | Media (5.3) | 0.59% | — | 30 ago 2024 | A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0. Affected by this vulnerability is the function delete_record of the file /classes/Master.php?f=delete_record.… |
| CVE-2024-8346 | Media (5.3) | 0.59% | — | 30 ago 2024 | A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. Affected is the function update_settings_info of the file /classes/SystemSettings.php?f=update_settings.… |
| CVE-2024-41332 | Media (6.5) | 0.60% | — | 12 ago 2024 | Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete categories. |
| CVE-2024-34480 | Crítica (9.8) | 0.60% | — | 7 ago 2024 | SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection. |
| CVE-2024-34479 | Crítica (9.8) | 0.70% | — | 7 ago 2024 | SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection. |
| CVE-2024-31586 | Media (6.1) | 0.48% | — | 20 jun 2024 | A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and… |
| CVE-2024-35583 | Media (6.1) | 0.47% | — | 28 may 2024 | A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Remarks input field. |
| CVE-2024-35582 | Media (6.1) | 0.42% | — | 28 may 2024 | A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Department input field. |
| CVE-2024-35581 | Media (6.1) | 0.43% | — | 28 may 2024 | A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Borrower Name input field. |
| CVE-2024-34225 | Media (6.1) | 0.57% | — | 14 may 2024 | Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the name,… |
| CVE-2024-34224 | Alta (7.3) | 0.87% | — | 14 may 2024 | Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname,… |
| CVE-2024-31545 | Crítica (9.4) | 0.61% | — | 22 abr 2024 | Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manage_user&id=6. |
| CVE-2024-31547 | Crítica (9.1) | 0.61% | — | 19 abr 2024 | Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/view_item.php. |
| CVE-2024-31546 | Crítica (9.8) | 0.73% | — | 19 abr 2024 | Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/view_damage.php. |
| CVE-2024-3695 | Media (5.4) | 0.60% | — | 12 abr 2024 | A vulnerability has been found in SourceCodester Computer Laboratory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /classes/Users.php. The manipulation of the… |
| CVE-2024-31544 | Media (5.4) | 0.44% | — | 9 abr 2024 | A stored cross-site scripting (XSS) vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrower_name”,… |
| CVE-2024-3377 | Media (6.1) | 0.63% | — | 6 abr 2024 | A vulnerability classified as problematic was found in SourceCodester Computer Laboratory Management System 1.0. This vulnerability affects unknown code of the file /classes/SystemSettings.php?f=update_settings. The… |
| CVE-2024-3376 | Crítica (9.8) | 1.3% | — | 6 abr 2024 | A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file config.php. The manipulation of the argument url leads to… |
| CVE-2024-3316 | Alta (8.8) | 0.61% | — | 4 abr 2024 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file… |
| CVE-2024-3315 | Crítica (9.8) | 0.72% | — | 4 abr 2024 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file classes/user.php. The manipulation of the argument… |
| CVE-2024-3314 | Crítica (9.8) | 0.55% | — | 4 abr 2024 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php. The manipulation leads to sql… |
| CVE-2024-3251 | Alta (8.8) | 0.61% | — | 3 abr 2024 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/?page=borrow/view_borrow. The… |
| CVE-2024-3140 | Media (5.4) | 0.55% | — | 1 abr 2024 | A vulnerability, which was classified as problematic, was found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file /classes/Users.php?f=save. The manipulation of the… |
| CVE-2024-3139 | Media (5.4) | 0.49% | — | 1 abr 2024 | A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function save_users of the file /classes/Users.php?f=save. The… |
| CVE-2024-3131 | Media (6.5) | 0.53% | — | 1 abr 2024 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=save_category. The… |
Otros productos de Oretnom23
Online Computer AND Laptop Store · 32Human Resource Management System · 29Online Eyewear Shop · 29Online Food Ordering System · 29Clinic's Patient Management System · 27Lost AND Found Information System · 27Customer Support System · 19Food Ordering Management System · 17Simple Online Bidding System · 17AC Repair AND Services System · 16Employee Task Management System · 15Employee AND Visitor Gate Pass Logging System · 15