Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:alton_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductAlton Management System (872ac6be-7fa9-57f1-97e0-8a96355161ae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7278 vulnerable 2026-06-08 06:58:21.729421 itsourcecode Alton Management System team_save.php sql injection
MEDIUM (4.7)
A vulnerability was found in itsourcecode Alton Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/team_save.php. The manipulation of the argument team leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273147.
Published: 2024-07-31T00:00:08.789Z
Updated: 2024-08-01T21:52:31.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7277 vulnerable 2026-06-08 06:58:21.728567 itsourcecode Alton Management System Add a Menu menu.php unrestricted upload
MEDIUM (4.7)
A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/menu.php of the component Add a Menu. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-273146 is the identifier assigned to this vulnerability.
Published: 2024-07-30T23:31:04.329Z
Updated: 2024-08-01T21:52:31.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7276 vulnerable 2026-06-08 06:58:21.727895 itsourcecode Alton Management System member_save.php sql injection
MEDIUM (4.7)
A vulnerability has been found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/member_save.php. The manipulation of the argument last/first leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273145 was assigned to this vulnerability.
Published: 2024-07-30T23:00:06.862Z
Updated: 2024-08-01T21:52:31.560Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7275 vulnerable 2026-06-08 06:58:21.727321 itsourcecode Alton Management System category_save.php sql injection
MEDIUM (4.7)
A vulnerability, which was classified as critical, was found in itsourcecode Alton Management System 1.0. Affected is an unknown function of the file /admin/category_save.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273144.
Published: 2024-07-30T22:31:04.041Z
Updated: 2024-08-01T21:52:31.409Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7274 vulnerable 2026-06-08 06:58:21.726607 itsourcecode Alton Management System reservation_status.php sql injection
MEDIUM (4.7)
A vulnerability, which was classified as critical, has been found in itsourcecode Alton Management System 1.0. This issue affects some unknown processing of the file /reservation_status.php. The manipulation of the argument rcode leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273143.
Published: 2024-07-30T21:31:04.387Z
Updated: 2024-08-01T21:52:31.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7273 vulnerable 2026-06-08 06:58:21.725241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.