Vulnerabilities (CVE)

Filtered by vendor Mayurik Subscribe
Total 164 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-7638 1 Mayurik 1 Advocate Office Management System 2024-08-15 6.5 MEDIUM 9.8 CRITICAL
A vulnerability classified as critical has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file delete_client.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-40476 1 Mayurik 1 Best House Rental Management 2024-08-15 N/A 8.0 HIGH
A Cross-Site Request Forgery (CSRF) vulnerability was found in SourceCodester Best House Rental Management System v1.0. This could lead to an attacker tricking the administrator into adding/modifying/deleting valid tenant data via a crafted HTML page, as demonstrated by a Delete Tenant action at the /rental/ajax.php?action=delete_tenant.
CVE-2024-40475 1 Mayurik 1 Best House Rental Management System 2024-08-15 N/A 8.8 HIGH
SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/payment_report.php, /rental/balance_report.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php.
CVE-2024-40474 1 Mayurik 1 Best House Rental Management System 2024-08-15 N/A 5.4 MEDIUM
A Reflected Cross Site Scripting (XSS) vulnerability was found in "edit-cate.php" in SourceCodester House Rental Management System v1.0.