Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:yoga_class_registration_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductYoga Class Registration System (bda01198-979c-5f05-a001-0190453c7d40)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7914 vulnerable 2026-06-08 06:58:23.892236 SourceCodester Yoga Class Registration System SystemSettings.php cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in SourceCodester Yoga Class Registration System 1.0. Affected is an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the argument address leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-18T22:00:06.960Z
Updated: 2024-08-19T13:31:32.990Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7853 vulnerable 2026-06-08 06:58:23.691206 SourceCodester Yoga Class Registration System sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=categories/view_category. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-16T00:31:05.932Z
Updated: 2024-09-03T17:59:05.282Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7852 vulnerable 2026-06-08 06:58:23.690513 SourceCodester Yoga Class Registration System view_inquiry.php cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/inquiries/view_inquiry.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-16T00:31:04.422Z
Updated: 2024-08-16T13:56:15.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7851 vulnerable 2026-06-08 06:58:23.688930 SourceCodester Yoga Class Registration System Add User Users.php improper authorization
MEDIUM (6.3)
A vulnerability has been found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save of the component Add User Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-16T00:00:05.504Z
Updated: 2024-09-03T18:00:41.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1395 vulnerable 2026-06-08 05:52:35.761304 SourceCodester Yoga Class Registration System list.php query cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222982 is the identifier assigned to this vulnerability.
Published: 2023-03-14T14:33:28.175Z
Updated: 2025-02-26T21:36:56.401Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1366 vulnerable 2026-06-08 05:52:35.703334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0982 vulnerable 2026-06-08 05:52:33.568742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0981 vulnerable 2026-06-08 05:52:33.568299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0980 vulnerable 2026-06-08 05:52:33.567120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.