Approved changes feed: RSS · Atom

cpe:2.3:a:oretnom23:cab_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorOretnom23 (bb7583fb-f029-599f-a8a3-33d64769aa1f)
ProductCab Management System (7d5c1128-ad23-5f12-aa7b-14625f76ed6f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-36923 vulnerable 2026-06-08 07:59:14.286827 Details available
Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php.
Published: 2026-04-13T00:00:00.000Z
Updated: 2026-04-13T20:27:18.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-36922 vulnerable 2026-06-08 07:59:14.286502 Details available
Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php.
Published: 2026-04-13T00:00:00.000Z
Updated: 2026-04-13T20:37:43.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5893 vulnerable 2026-06-08 06:56:17.703375 SourceCodester Cab Management System sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in SourceCodester Cab Management System 1.0. This affects an unknown part of the file /cms/classes/Users.php?f=delete_client. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-268137 was assigned to this vulnerability.
Published: 2024-06-12T14:31:04.493Z
Updated: 2024-08-01T21:25:03.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51031 vulnerable 2026-06-08 06:52:11.635916 Details available
A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "First Name," "Middle Name," and "Last Name" fields.
Published: 2024-11-08T00:00:00.000Z
Updated: 2024-11-20T22:56:12.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51030 vulnerable 2026-06-08 06:52:11.635428 Details available
A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database.
Published: 2024-11-08T00:00:00.000Z
Updated: 2024-11-21T16:16:44.179Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.