Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:prison_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductPrison Management System (69eddb1c-7e42-5bd2-9995-74faca397bd6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2177 vulnerable 2026-06-08 07:55:16.672354 SourceCodester Prison Management System Login session fixiation
HIGH (7.3)
A vulnerability has been found in SourceCodester Prison Management System 1.0. The impacted element is an unknown function of the component Login. The manipulation leads to session fixiation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-02-08T19:02:09.135Z
Updated: 2026-02-23T09:47:29.826Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7813 vulnerable 2026-06-08 06:58:23.475754 SourceCodester Prison Management System Profile Image insufficiently protected credentials
MEDIUM (5.3)
A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. This issue affects some unknown processing of the file /uploadImage/Profile/ of the component Profile Image Handler. The manipulation leads to insufficiently protected credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-15T03:00:08.118Z
Updated: 2024-08-15T14:00:08.328Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4645 vulnerable 2026-06-08 06:50:18.359761 SourceCodester Prison Management System changepassword.php cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /Admin/changepassword.php. The manipulation of the argument txtold_password/txtnew_password/txtconfirm_password leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263489 was assigned to this vulnerability.
Published: 2024-05-08T12:31:04.798Z
Updated: 2024-08-21T21:01:07.948Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4644 vulnerable 2026-06-08 06:50:18.359067 SourceCodester Prison Management System changepassword.php cross site scripting
LOW (3.5)
A vulnerability has been found in SourceCodester Prison Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /Employee/changepassword.php. The manipulation of the argument txtold_password/txtnew_password/txtconfirm_password leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263488.
Published: 2024-05-08T11:31:03.760Z
Updated: 2024-08-01T20:47:41.450Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4528 vulnerable 2026-06-08 06:50:18.036336 SourceCodester Prison Management System user-record.php cross site scripting
LOW (2.4)
A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/user-record.php. The manipulation of the argument txtfullname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263131.
Published: 2024-05-06T06:31:04.328Z
Updated: 2024-08-01T20:40:47.433Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4512 vulnerable 2026-06-08 06:50:18.012953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4500 vulnerable 2026-06-08 06:50:17.867635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3443 vulnerable 2026-06-08 06:41:53.309604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3442 vulnerable 2026-06-08 06:41:53.309013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3441 vulnerable 2026-06-08 06:41:53.308445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3440 vulnerable 2026-06-08 06:41:53.307869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3439 vulnerable 2026-06-08 06:41:53.307097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3438 vulnerable 2026-06-08 06:41:53.304942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3437 vulnerable 2026-06-08 06:41:53.304461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3436 vulnerable 2026-06-08 06:41:53.302947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2020 vulnerable 2026-06-08 05:42:50.064155 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2019 vulnerable 2026-06-08 05:42:50.063687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2018 vulnerable 2026-06-08 05:42:50.063181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2017 vulnerable 2026-06-08 05:42:50.061387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.