Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:ship_ferry_ticket_reservation_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductShip Ferry Ticket Reservation System (e06d9748-8cea-5400-a83a-596b9fc2ab38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11338 vulnerable 2026-06-08 07:47:14.112959 SourceCodester Ship Ferry Ticket Reservation System manage_user cross site scripting
LOW (2.4)
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-06-05T16:15:09.617Z
Updated: 2026-06-08T16:08:59.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10877 vulnerable 2026-06-08 07:47:13.932995 SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection
HIGH (7.3)
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impacts an unknown function of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-06-04T23:45:10.256Z
Updated: 2026-06-08T18:31:26.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10876 vulnerable 2026-06-08 07:47:13.932688 SourceCodester Ship Ferry Ticket Reservation System admin improper authorization
MEDIUM (6.3)
A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown function of the file /admin/. This manipulation of the argument page causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Published: 2026-06-04T23:30:10.693Z
Updated: 2026-06-08T15:53:11.077Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.