Computer Laboratory Management System (Oretnom23) - vulnerabilities (CVEs)

30 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-03-08. Vendor: Oretnom23.

CVEs of Computer Laboratory Management System

CVE-2026-3770 - CVSS 8.8 (high), 2026-03-08: A flaw has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part. This manipulation causes cross-site request…
CVE-2025-45956 - CVSS 8.8 (high), 2025-04-29: A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute…
CVE-2024-54818 - CVSS 8.8 (high), 2025-01-08: SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list.
CVE-2024-40443 - CVSS 4.3 (medium), 2024-11-13: SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the…
CVE-2024-8348 - CVSS 9.8 (critical), 2024-08-30: A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the…
CVE-2024-8347 - CVSS 9.8 (critical), 2024-08-30: A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0. Affected by this vulnerability is the function…
CVE-2024-8346 - CVSS 9.8 (critical), 2024-08-30: A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. Affected is the function…
CVE-2024-41332 - CVSS 6.5 (medium), 2024-08-12: Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with…
CVE-2024-34480 - CVSS 9.8 (critical), 2024-08-07: SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection.
CVE-2024-34479 - CVSS 9.8 (critical), 2024-08-07: SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection.
CVE-2024-31586 - CVSS 6.1 (medium), 2024-06-20: A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute…
CVE-2024-35583 - CVSS 6.1 (medium), 2024-05-28: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a…
CVE-2024-35582 - CVSS 6.1 (medium), 2024-05-28: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a…
CVE-2024-35581 - CVSS 6.1 (medium), 2024-05-28: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a…
CVE-2024-34225 - CVSS 6.1 (medium), 2024-05-14: Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers…
CVE-2024-34224 - CVSS 7.3 (high), 2024-05-14: Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote…
CVE-2024-31545 - CVSS 9.4 (critical), 2024-04-22: Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manage_user&id=6.
CVE-2024-31547 - CVSS 9.1 (critical), 2024-04-19: Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/view_item.php.
CVE-2024-31546 - CVSS 9.8 (critical), 2024-04-19: Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/view_damage.php.
CVE-2024-3695 - CVSS 5.4 (medium), 2024-04-12: A vulnerability has been found in SourceCodester Computer Laboratory Management System 1.0 and classified as problematic. This vulnerability affects unknown…
CVE-2024-31544 - CVSS 5.4 (medium), 2024-04-09: A stored cross-site scripting (XSS) vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by…
CVE-2024-3377 - CVSS 6.1 (medium), 2024-04-06: A vulnerability classified as problematic was found in SourceCodester Computer Laboratory Management System 1.0. This vulnerability affects unknown code of…
CVE-2024-3376 - CVSS 9.8 (critical), 2024-04-06: A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file…
CVE-2024-3316 - CVSS 8.8 (high), 2024-04-04: A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. Affected by this vulnerability is an…
CVE-2024-3315 - CVSS 9.8 (critical), 2024-04-04: A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been classified as critical. Affected is an unknown function of…
CVE-2024-3314 - CVSS 9.8 (critical), 2024-04-04: A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0 and classified as critical. This issue affects some unknown processing…
CVE-2024-3251 - CVSS 8.8 (high), 2024-04-03: A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown…
CVE-2024-3140 - CVSS 5.4 (medium), 2024-04-01: A vulnerability, which was classified as problematic, was found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of…
CVE-2024-3139 - CVSS 5.4 (medium), 2024-04-01: A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the…
CVE-2024-3131 - CVSS 6.5 (medium), 2024-04-01: A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. This vulnerability affects unknown…