Insurance Management System vulnerabilities | LiveThreat CVE Feed

Product

Insurance Management System

by Munyweki · last CVE Sep 4, 2024

CVEs

On KEV

8.1

Max CVSS

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 0High 2Medium 11Low 0

Severity

All severities13 Critical0 High2 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Insurance Management System to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-31502	8.1	1%	Apr 26	An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/new_staff Affected: All versions, or not specified
CVE-2024-7080	7.5	1%	Jul 24	SourceCodester Insurance Management System direct request Affected: 1.0
CVE-2024-31063	6.4	1%	Mar 28	Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Email input field Affected: through 1.0
CVE-2024-31062	6.3	1%	Mar 28	Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Street input field Affected: through 1.0
CVE-2024-31648	6.1	0%	Apr 15	Cross Site Scripting (XSS) in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category… Affected: 1.0
CVE-2024-31064	6.1	1%	Mar 28	Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field Affected: through 1.0
CVE-2024-31061	6.1	1%	Mar 28	Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Last Name input field Affected: through 1.0
CVE-2024-31065	6.1	1%	Mar 28	Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the City input field Affected: through 1.0
CVE-2024-25854	6.1	0%	Mar 11	Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when… Affected: 1.0
CVE-2024-7225	5.4	1%	Jul 30	SourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting Affected: 1.0
CVE-2024-2150	5.3	1%	Mar 3	SourceCodester Insurance Management System file inclusion Affected: 1.0
CVE-2024-7068	4.6	0%	Jul 24	SourceCodester Insurance Management System update_sub_category cross site scripting Affected: 1.0
CVE-2024-8414	4.3	0%	Sep 4	SourceCodester Insurance Management System cross-site request forgery Affected: 1.0