Filtered by vendor Sourcecodehero Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-10336 2 Clothes Recommendation System Project, Sourcecodehero 2 Clothes Recommendation System, Clothes Recommendation System 2024-11-07 7.3 High
A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-10337 2 Clothes Recommendation System Project, Sourcecodehero 2 Clothes Recommendation System, Clothes Recommendation System 2024-10-30 4.7 Medium
A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/home.php?con=add. The manipulation of the argument cat/subcat/ t1/t2/text leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-10338 2 Clothes Recommendation System Project, Sourcecodehero 2 Clothes Recommendation System, Clothes Recommendation System 2024-10-30 4.7 Medium
A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/home.php. The manipulation of the argument view/view1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-44728 2 Angeljudesuarez, Sourcecodehero 2 Event Management System, Event Management System 2024-09-06 7.6 High
Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact# in /clientdetails/admin/regester.php.
CVE-2024-44727 2 Angeljudesuarez, Sourcecodehero 2 Event Management System, Event Management System 2024-09-06 7.4 High
Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php.