Filtered by vendor Munyweki Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-8414 2 Munyweki, Sourcecodester 2 Insurance Management System, Insurance Management System 2024-09-06 4.3 Medium
A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-7225 1 Munyweki 1 Insurance Management System 2024-08-13 3.5 Low
A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/update_policy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272805 was assigned to this vulnerability.
CVE-2024-31502 1 Munyweki 1 Insurance Management System 2024-08-02 8.1 High
An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/new_staff.