Approved changes feed: RSS · Atom

cpe:2.3:a:munyweki:insurance_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorMunyweki (277bb9f8-503b-5101-82be-84f9f41597b7)
ProductInsurance Management System (af042e8f-ac96-56af-a4f8-f22033591411)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8414 vulnerable 2026-06-08 07:00:24.563893 SourceCodester Insurance Management System cross-site request forgery
MEDIUM (4.3)
A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-04T16:31:05.409Z
Updated: 2024-09-04T17:33:08.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7225 vulnerable 2026-06-08 06:58:21.568498 SourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/update_policy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272805 was assigned to this vulnerability.
Published: 2024-07-30T08:31:04.227Z
Updated: 2024-08-01T21:52:31.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7080 vulnerable 2026-06-08 06:58:21.198466 SourceCodester Insurance Management System direct request
MEDIUM (5.3)
A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /E-Insurance/. The manipulation leads to direct request. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272365 was assigned to this vulnerability.
Published: 2024-07-24T20:00:05.270Z
Updated: 2024-08-01T21:52:30.657Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7068 vulnerable 2026-06-08 06:58:21.159778 SourceCodester Insurance Management System update_sub_category cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in SourceCodester Insurance Management System 1.0. This affects an unknown part of the file /Script/admin/core/update_sub_category. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272349 was assigned to this vulnerability.
Published: 2024-07-24T15:00:08.622Z
Updated: 2024-08-01T21:52:30.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31648 vulnerable 2026-06-08 06:35:32.034207 Details available
Cross Site Scripting (XSS) in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/new_category2.
Published: 2024-04-15T00:00:00.000Z
Updated: 2024-08-08T18:47:17.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2150 vulnerable 2026-06-08 06:33:30.435692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25854 vulnerable 2026-06-08 06:31:23.933012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.