Vendorsmunywekiinsurance_management_systemall versions
Vulnerabilities

munyweki Insurance Management System

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

12CVEs
CVE-2024-7080
SourceCodester Insurance Management System direct request
Published 2024-07-24 · Analyzed
7.5EPSS 0.010
CVE-2024-8414
SourceCodester Insurance Management System cross-site request forgery
Published 2024-09-04 · Analyzed
6.9EPSS 0.003
CVE-2024-31063
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Email input field.
Published 2024-03-28 · Analyzed
6.4EPSS 0.009
CVE-2024-31062
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Street input field.
Published 2024-03-28 · Analyzed
6.3EPSS 0.008
CVE-2024-31061
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Last Name input field.
Published 2024-03-28 · Analyzed
6.1EPSS 0.009
CVE-2024-31065
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the City input field.
Published 2024-03-28 · Analyzed
6.1EPSS 0.008
CVE-2024-31064
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field.
Published 2024-03-28 · Modified
6.1EPSS 0.007
CVE-2024-31648
Cross Site Scripting (XSS) in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/new_category2.
Published 2024-04-15 · Analyzed
6.1EPSS 0.005
CVE-2024-25854
Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket.
Published 2024-03-11 · Analyzed
6.1EPSS 0.003
CVE-2024-7225
SourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting
Published 2024-07-30 · Modified
5.4EPSS 0.005
CVE-2024-2150
SourceCodester Insurance Management System file inclusion
Published 2024-03-03 · Analyzed
5.3EPSS 0.006
CVE-2024-7068
SourceCodester Insurance Management System update_sub_category cross site scripting
Published 2024-07-24 · Analyzed
5.3EPSS 0.004