Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:insurance_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductInsurance Management System (389a5a1f-1675-5407-84b7-81b562e84ae6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8414 vulnerable 2026-06-08 07:00:24.548774 SourceCodester Insurance Management System cross-site request forgery
MEDIUM (4.3)
A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-04T16:31:05.409Z
Updated: 2024-09-04T17:33:08.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7916 vulnerable 2026-06-08 06:58:23.897927 nafisulbari/itsourcecode Insurance Management System Add Nominee Page addNominee.php cross site scripting
LOW (3.5)
A vulnerability classified as problematic was found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file addNominee.php of the component Add Nominee Page. The manipulation of the argument Nominee-Client ID leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-18T22:31:03.738Z
Updated: 2024-08-19T18:04:16.948Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7225 vulnerable 2026-06-08 06:58:21.568408 SourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/update_policy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272805 was assigned to this vulnerability.
Published: 2024-07-30T08:31:04.227Z
Updated: 2024-08-01T21:52:31.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31065 vulnerable 2026-06-08 06:35:30.835490 Details available
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the City input field.
Published: 2024-03-28T00:00:00.000Z
Updated: 2024-08-02T01:46:04.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31063 vulnerable 2026-06-08 06:35:30.834754 Details available
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Email input field.
Published: 2024-03-28T00:00:00.000Z
Updated: 2024-08-20T19:30:18.050Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31062 vulnerable 2026-06-08 06:35:30.834059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2150 vulnerable 2026-06-08 06:33:30.433948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25854 vulnerable 2026-06-08 06:31:23.931589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.