Approved changes feed: RSS · Atom

cpe:2.3:a:oretnom23:medicine_tracker_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorOretnom23 (bb7583fb-f029-599f-a8a3-33d64769aa1f)
ProductMedicine Tracker System (7d479198-c8bd-50d9-8083-3e7c6847528a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7226 vulnerable 2026-06-08 06:58:21.570900 SourceCodester Medicine Tracker System Password Change cross-site request forgery
MEDIUM (4.3)
A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /classes/Users.php?f=save_user of the component Password Change Handler. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-272806 is the identifier assigned to this vulnerability.
Published: 2024-07-30T09:00:08.175Z
Updated: 2024-08-01T21:52:31.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6419 vulnerable 2026-06-08 06:58:19.391332 SourceCodester Medicine Tracker System sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file /classes/Master.php?f=save_medicine. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-270010 is the identifier assigned to this vulnerability.
Published: 2024-06-30T23:31:03.745Z
Updated: 2024-08-01T21:41:03.333Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6418 vulnerable 2026-06-08 06:58:19.390518 SourceCodester Medicine Tracker System sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file /classes/Users.php?f=register_user. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-270009 was assigned to this vulnerability.
Published: 2024-06-30T23:00:05.648Z
Updated: 2024-08-01T21:41:03.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7134 vulnerable 2026-06-08 06:21:57.107561 SourceCodester Medicine Tracking System path traversal
MEDIUM (6.3)
A vulnerability was found in SourceCodester Medicine Tracking System 1.0. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument page leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249137 was assigned to this vulnerability.
Published: 2023-12-28T20:00:05.775Z
Updated: 2024-11-20T21:52:45.852Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7123 vulnerable 2026-06-08 06:21:57.085837 SourceCodester Medicine Tracking System sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracking System 1.0. This issue affects some unknown processing of the file /classes/Master.php? f=save_medicine. The manipulation of the argument id/name/description leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249095.
Published: 2023-12-27T23:31:04.138Z
Updated: 2024-08-02T08:50:08.153Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5581 vulnerable 2026-06-08 06:19:44.070969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.