SourceCodester / Simple Online Bidding System
17 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-7911 | SourceCodester Simple Online Bidding System index.php file inclusion | MEDIUM | 5.3 | Aug 18, 2024 |
| CVE-2024-7800 | SourceCodester Simple Online Bidding System ajax.php sql injection | MEDIUM | 5.3 | Aug 14, 2024 |
| CVE-2024-7799 | SourceCodester Simple Online Bidding System users.php improper authorization | MEDIUM | 6.9 | Aug 14, 2024 |
| CVE-2024-7798 | SourceCodester Simple Online Bidding System ajax.php sql injection | MEDIUM | 6.9 | Aug 14, 2024 |
| CVE-2024-7797 | SourceCodester Simple Online Bidding System ajax.php sql injection | MEDIUM | 6.9 | Aug 14, 2024 |
| CVE-2024-6417 | SourceCodester Simple Online Bidding System sql injection | MEDIUM | 5.3 | Jun 30, 2024 |
| CVE-2024-6280 | SourceCodester Simple Online Bidding System unrestricted upload | MEDIUM | 5.3 | Jun 24, 2024 |
| CVE-2024-5437 | SourceCodester Simple Online Bidding System save_category cross site scripting | MEDIUM | 5.3 | May 28, 2024 |
| CVE-2024-5428 | SourceCodester Simple Online Bidding System HTTP POST Request save_product cross-site request forgery | MEDIUM | 6.9 | May 28, 2024 |
| CVE-2024-4933 | SourceCodester Simple Online Bidding System sql injection | MEDIUM | 5.3 | May 16, 2024 |
| CVE-2024-4932 | SourceCodester Simple Online Bidding System sql injection | MEDIUM | 5.3 | May 16, 2024 |
| CVE-2024-4931 | SourceCodester Simple Online Bidding System sql injection | MEDIUM | 5.3 | May 16, 2024 |
| CVE-2024-4930 | SourceCodester Simple Online Bidding System sql injection | MEDIUM | 5.3 | May 16, 2024 |
| CVE-2024-4929 | SourceCodester Simple Online Bidding System cross-site request forgery | MEDIUM | 6.9 | May 16, 2024 |
| CVE-2024-4928 | SourceCodester Simple Online Bidding System sql injection | MEDIUM | 5.3 | May 16, 2024 |
| CVE-2024-4927 | SourceCodester Simple Online Bidding System unrestricted upload | MEDIUM | 6.9 | May 16, 2024 |
| CVE-2024-2077 | SourceCodester Simple Online Bidding System index.php sql injection | CRITICAL | 9.8 | Mar 1, 2024 |
Showing 1 to 17 of 17 CVEs