SourceCodester Simple Traffic Offense System vulnerabilities

In SourceCodester Simple Traffic Offense System 1.0, a vulnerability was found in the file save-settings.php of the Settings Update Endpoint component. Manipulation of the site_name/site_desc arguments leads to cross-site scripting. Remote exploitation is possible, and the exploit has been disclosed.

In SourceCodester Simple Traffic Offense System 1.0, a vulnerability was found in the file delete-user.php of the Deletion Endpoint component. Manipulation of the ID argument leads to missing authentication. The attack can be launched remotely, and the exploit has been published.

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0 in an unknown function of the file saveuser.php in the User Creation component. Manipulation of the argument position results in missing authentication. The attack may be initiated remotely and the exploit is now public.