Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:accounts_manager_app:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductAccounts Manager App (04889389-78f3-5a88-ba62-a982dae5823c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7948 vulnerable 2026-06-08 06:58:24.003032 SourceCodester Accounts Manager App Update Account Page update-account.php cross site scripting
LOW (3.5)
A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-20T02:00:04.581Z
Updated: 2024-08-20T13:15:10.197Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7749 vulnerable 2026-06-08 06:58:23.362431 SourceCodester Accounts Manager App add-account.php cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoint/add-account.php. The manipulation of the argument account_name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-13T22:00:05.975Z
Updated: 2024-08-14T13:40:47.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7748 vulnerable 2026-06-08 06:58:23.361041 SourceCodester Accounts Manager App delete-account.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the file /endpoint/delete-account.php. The manipulation of the argument account leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-13T21:31:03.881Z
Updated: 2024-08-14T20:17:35.781Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.