Sourcecodester Ac Repair And Services System vulnerabilities

16 known vulnerabilities affecting sourcecodester/ac_repair_and_services_system.

Total CVEs
16
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL6MEDIUM10

Vulnerabilities

Page 1 of 1
CVE-2025-2654MEDIUMCVSS 6.9v1.02025-03-23
CVE-2025-2654 [MEDIUM] CWE-74 CVE-2025-2654: A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classifie A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/services/manage_service.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may b
cvelistv5nvd
CVE-2025-2655MEDIUMCVSS 6.9v1.02025-03-23
CVE-2025-2655 [MEDIUM] CWE-74 CVE-2025-2655: A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected eleme A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function save_users/delete_users of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. Other parameters mi
cvelistv5nvd
CVE-2023-5021MEDIUMCVSS 6.1v1.02023-09-17
CVE-2023-5021 [LOW] CWE-79 CVE-2023-5021: A vulnerability, which was classified as problematic, was found in SourceCodester AC Repair and Serv A vulnerability, which was classified as problematic, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file admin/?page=system_info/contact_information. The manipulation of the argument telephone/mobile/address leads to cross site scripting. It is possible to launch the attack remotely. VDB-239862 is th
cvelistv5nvd
CVE-2023-3678CRITICALCVSS 9.8v1.02023-07-15
CVE-2023-3678 [MEDIUM] CWE-89 CVE-2023-3678: A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=delete_inquiry of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack can be launched rem
cvelistv5nvd
CVE-2023-3661CRITICALCVSS 9.8v1.02023-07-13
CVE-2023-3661 [MEDIUM] CWE-89 CVE-2023-3661: A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classifie A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=save_inquiry. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB
cvelistv5nvd
CVE-2023-3657CRITICALCVSS 9.8v1.02023-07-13
CVE-2023-3657 [MEDIUM] CWE-89 CVE-2023-3657: A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Se A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. This issue affects some unknown processing of the file Master.php?f=save_book of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The associated
cvelistv5nvd
CVE-2023-3658CRITICALCVSS 9.8v1.02023-07-13
CVE-2023-3658 [MEDIUM] CWE-89 CVE-2023-3658: A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Service A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file Master.php?f=delete_book of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of thi
cvelistv5nvd
CVE-2023-3659MEDIUMCVSS 6.1v1.02023-07-13
CVE-2023-3659 [LOW] CWE-79 CVE-2023-3659: A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=user/manage_user. The manipulation of the argument firstname/middlename leads to cross site scripting. The attack can be launched remotely. The identifier VDB-2
cvelistv5nvd
CVE-2023-3619CRITICALCVSS 9.8v1.02023-07-11
CVE-2023-3619 [MEDIUM] CWE-89 CVE-2023-3619: A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as crit A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the file Master.php?f=save_service of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The identifier VDB-233573
cvelistv5nvd
CVE-2023-2656CRITICALCVSS 9.8v1.02023-05-11
CVE-2023-2656 [MEDIUM] CWE-89 CVE-2023-2656: A vulnerability classified as critical has been found in SourceCodester AC Repair and Services Syste A vulnerability classified as critical has been found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file /classes/Master.php?f=delete_service. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use
cvelistv5nvd
CVE-2023-2412MEDIUMCVSS 6.5v1.02023-04-29
CVE-2023-2412 [MEDIUM] CWE-89 CVE-2023-2412: A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classifie A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used
cvelistv5nvd
CVE-2023-2413MEDIUMCVSS 6.5v1.02023-04-29
CVE-2023-2413 [MEDIUM] CWE-89 CVE-2023-2413: A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bookings/manage_booking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the
cvelistv5nvd
CVE-2023-2410MEDIUMCVSS 6.5v1.02023-04-28
CVE-2023-2410 [MEDIUM] CWE-89 CVE-2023-2410: A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/bookings/view_booking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be use
cvelistv5nvd
CVE-2023-2409MEDIUMCVSS 6.5v1.02023-04-28
CVE-2023-2409 [MEDIUM] CWE-89 CVE-2023-2409: A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Service A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. This affects an unknown part of the file /admin/services/view_service.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be u
cvelistv5nvd
CVE-2023-2411MEDIUMCVSS 6.5v1.02023-04-28
CVE-2023-2411 [MEDIUM] CWE-89 CVE-2023-2411: A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as crit A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/view_inquiry.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used
cvelistv5nvd
CVE-2023-2408MEDIUMCVSS 6.5v1.02023-04-28
CVE-2023-2408 [MEDIUM] CWE-89 CVE-2023-2408: A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Se A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. Affected by this issue is some unknown functionality of the file services/view.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may b
cvelistv5nvd