Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:prison_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductPrison Management System (69eddb1c-7e42-5bd2-9995-74faca397bd6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7813 vulnerable 2026-06-08 06:58:23.475055 SourceCodester Prison Management System Profile Image insufficiently protected credentials
MEDIUM (5.3)
A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. This issue affects some unknown processing of the file /uploadImage/Profile/ of the component Profile Image Handler. The manipulation leads to insufficiently protected credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-15T03:00:08.118Z
Updated: 2024-08-15T14:00:08.328Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4645 vulnerable 2026-06-08 06:50:18.359718 SourceCodester Prison Management System changepassword.php cross site scripting
LOW (3.5)
A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /Admin/changepassword.php. The manipulation of the argument txtold_password/txtnew_password/txtconfirm_password leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263489 was assigned to this vulnerability.
Published: 2024-05-08T12:31:04.798Z
Updated: 2024-08-21T21:01:07.948Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4528 vulnerable 2026-06-08 06:50:18.029316 SourceCodester Prison Management System user-record.php cross site scripting
LOW (2.4)
A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/user-record.php. The manipulation of the argument txtfullname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263131.
Published: 2024-05-06T06:31:04.328Z
Updated: 2024-08-01T20:40:47.433Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48594 vulnerable 2026-06-08 06:50:09.649730 Details available
File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute arbitrary code via the file upload component.
Published: 2024-10-28T00:00:00.000Z
Updated: 2024-10-30T16:46:54.674Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3443 vulnerable 2026-06-08 06:41:53.309451 SourceCodester Prison Management System apply_leave.php cross site scripting
LOW (3.5)
A vulnerability classified as problematic was found in SourceCodester Prison Management System 1.0. This vulnerability affects unknown code of the file /Employee/apply_leave.php. The manipulation of the argument txtstart_date/txtend_date leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259696.
Published: 2024-04-08T15:00:05.527Z
Updated: 2024-08-21T21:19:02.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3442 vulnerable 2026-06-08 06:41:53.308978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3440 vulnerable 2026-06-08 06:41:53.307712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3438 vulnerable 2026-06-08 06:41:53.304906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3437 vulnerable 2026-06-08 06:41:53.304417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3436 vulnerable 2026-06-08 06:41:53.302331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.