SourceCodester AC Repair and Services System 1.0 vulnerabilities
3 known CVE vulnerabilities in SourceCodester AC Repair and Services System 1.0, translated and rated.
- CVE-2023-3661Medium
A critical vulnerability was found in AC Repair and Services System version 1.0. Manipulation of the 'id' argument in the file /classes/Master.php?f=save_inquiry leads to SQL injection.
- CVE-2023-3659Low
A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 that allows cross site scripting (XSS) attacks through manipulation of the firstname/middlename arguments in the file admin/?page=user/manage_user.
- CVE-2023-3657Medium
A critical vulnerability has been found in SourceCodester AC Repair and Services System version 1.0, affecting unknown processing of the file Master.php?f=save_book in the HTTP POST Request Handler component. Manipulation of the argument id leads to SQL injection.