Simple Online Bidding System

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:simple_online_bidding_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductSimple Online Bidding System (2cc588f3-2e33-50a8-a248-d1b995e41477)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7911 vulnerable 2026-06-08 06:58:23.890186 SourceCodester Simple Online Bidding System index.php file inclusion
MEDIUM (6.3)
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /simple-online-bidding-system/bidding/index.php. The manipulation of the argument page leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-18T19:31:03.544Z
Updated: 2024-08-19T16:17:38.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7800 vulnerable 2026-06-08 06:58:23.451960 SourceCodester Simple Online Bidding System ajax.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file /simple-online-bidding-system/bidding/admin/ajax.php?action=delete_product. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-14T23:31:05.647Z
Updated: 2024-08-15T14:31:47.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7799 vulnerable 2026-06-08 06:58:23.451399 SourceCodester Simple Online Bidding System users.php improper authorization
MEDIUM (5.3)
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /simple-online-bidding-system/bidding/admin/users.php. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-14T23:31:03.816Z
Updated: 2024-08-15T13:57:04.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7798 vulnerable 2026-06-08 06:58:23.450586 SourceCodester Simple Online Bidding System ajax.php sql injection
HIGH (7.3)
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /simple-online-bidding-system/bidding/admin/ajax.php?action=login2. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-14T23:00:08.149Z
Updated: 2024-09-03T18:13:36.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7797 vulnerable 2026-06-08 06:58:23.450028 SourceCodester Simple Online Bidding System ajax.php sql injection
HIGH (7.3)
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. Affected is an unknown function of the file /simple-online-bidding-system/bidding/admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-14T23:00:06.334Z
Updated: 2024-08-15T14:44:51.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6417 vulnerable 2026-06-08 06:58:19.384924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6280 vulnerable 2026-06-08 06:58:18.464803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5437 vulnerable 2026-06-08 06:56:16.019575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5428 vulnerable 2026-06-08 06:56:15.997862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4933 vulnerable 2026-06-08 06:50:19.058915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4932 vulnerable 2026-06-08 06:50:19.058386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4931 vulnerable 2026-06-08 06:50:19.057400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4930 vulnerable 2026-06-08 06:50:19.056519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4929 vulnerable 2026-06-08 06:50:19.055782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4928 vulnerable 2026-06-08 06:50:19.055103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4927 vulnerable 2026-06-08 06:50:19.053513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2077 vulnerable 2026-06-08 06:33:30.300726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.