Approved changes feed: RSS · Atom

cpe:2.3:a:rems:php_crud:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorRems (50adb61c-3ff7-5843-b658-0384e3b41921)
ProductPhp Crud (3e5f49c4-6313-5f3a-a340-dae9609933a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8564 vulnerable 2026-06-03 14:58:18.741969 SourceCodester PHP CRUD update.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/update.php. The manipulation of the argument tbl_person_id/first_name/middle_name/last_name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-07T20:31:03.916Z
Updated: 2024-09-09T13:33:44.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8563 vulnerable 2026-06-03 14:58:18.741389 SourceCodester PHP CRUD update.php cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/update.php. The manipulation of the argument first_name/middle_name/last_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-07T20:00:04.571Z
Updated: 2024-09-09T13:35:27.828Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8562 vulnerable 2026-06-03 14:58:18.739421 SourceCodester PHP CRUD Add.php cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/Add.php. The manipulation of the argument first_name/middle_name/last_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-07T19:00:05.069Z
Updated: 2024-09-09T18:30:56.902Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8561 vulnerable 2026-06-03 14:58:18.738773 SourceCodester PHP CRUD Delete Person delete.php sql injection
MEDIUM (6.3)
A vulnerability has been found in SourceCodester PHP CRUD 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete.php of the component Delete Person Handler. The manipulation of the argument person leads to sql injection. The attack can be launched remotely.
Published: 2024-09-07T18:31:03.892Z
Updated: 2024-09-09T18:30:30.365Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.