Tamparongj03 vulnerabilities

10 vulnerabilities

Known vulnerabilities in Tamparongj03 products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
8.6CVE-2024-31507tamparongj03online_graduate_tracer_system
EPSS score
0.46%
Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "request" parameter in admin/fetch_gendercs.php.7.5CVE-2024-31506tamparongj03online_graduate_tracer_system
EPSS score
0.65%
Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "id" parameter in admin/admin_cs.php.6.9CVE-2024-7809sourcecodesteronline graduate tracer system+1
EPSS score
0.76%
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /tracking/nbproject/. The manipulation leads to exposure of information through directory listing. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.7.5CVE-2024-7842sourcecodesteronline graduate tracer system+1
EPSS score
0.98%
A vulnerability, which was classified as problematic, has been found in SourceCodester Online Graduate Tracer System 1.0. This issue affects some unknown processing of the file /tracking/admin/export_it.php. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.7.5CVE-2024-7845sourcecodesteronline graduate tracer system+1
EPSS score
0.51%
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /tracking/admin/fetch_it.php. The manipulation of the argument request leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.8.8CVE-2024-7949sourcecodesteronline graduate tracer system+1
EPSS score
0.54%
A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetch_genderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.5.4CVE-2024-7844sourcecodesteronline graduate tracer system+1
EPSS score
0.48%
A vulnerability has been found in SourceCodester Online Graduate Tracer System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /tracking/admin/add_acc.php. The manipulation of the argument name/user/position leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.8.8CVE-2024-7810sourcecodesteronline graduate tracer system+1
EPSS score
0.55%
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /tracking/admin/view_itprofile.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.7.5CVE-2024-7843sourcecodesteronline graduate tracer system+1
EPSS score
0.98%
A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file /tracking/admin/exportcs.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.8.8CVE-2024-7931sourcecodesteronline graduate tracer system+1
EPSS score
0.61%
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects some unknown processing of the file /tracking/admin/view_csprofile.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.