Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:simple_online_bidding_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductSimple Online Bidding System (2cc588f3-2e33-50a8-a248-d1b995e41477)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7911 vulnerable 2026-06-08 06:58:23.890125 SourceCodester Simple Online Bidding System index.php file inclusion
MEDIUM (6.3)
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /simple-online-bidding-system/bidding/index.php. The manipulation of the argument page leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-18T19:31:03.544Z
Updated: 2024-08-19T16:17:38.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7800 vulnerable 2026-06-08 06:58:23.451922 SourceCodester Simple Online Bidding System ajax.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file /simple-online-bidding-system/bidding/admin/ajax.php?action=delete_product. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-14T23:31:05.647Z
Updated: 2024-08-15T14:31:47.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7799 vulnerable 2026-06-08 06:58:23.451232 SourceCodester Simple Online Bidding System users.php improper authorization
MEDIUM (5.3)
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /simple-online-bidding-system/bidding/admin/users.php. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-14T23:31:03.816Z
Updated: 2024-08-15T13:57:04.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7798 vulnerable 2026-06-08 06:58:23.450550 SourceCodester Simple Online Bidding System ajax.php sql injection
HIGH (7.3)
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /simple-online-bidding-system/bidding/admin/ajax.php?action=login2. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-14T23:00:08.149Z
Updated: 2024-09-03T18:13:36.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6417 vulnerable 2026-06-08 06:58:19.384877 SourceCodester Simple Online Bidding System sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=delete_user. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-270008.
Published: 2024-06-30T22:31:04.420Z
Updated: 2024-08-01T21:41:03.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6280 vulnerable 2026-06-08 06:58:18.463672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5428 vulnerable 2026-06-08 06:56:15.996763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4932 vulnerable 2026-06-08 06:50:19.058329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4931 vulnerable 2026-06-08 06:50:19.057178 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4930 vulnerable 2026-06-08 06:50:19.056436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4928 vulnerable 2026-06-08 06:50:19.055001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4927 vulnerable 2026-06-08 06:50:19.044035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2077 vulnerable 2026-06-08 06:33:30.299697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.