ORETNOM23 Cab Management System vulnerabilities

5 CVEs affecting ORETNOM23 Cab Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-36923, published 2026-04-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-51030, published 2024-11-08. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading…
CVE-2024-5893, published 2024-06-12. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in SourceCodester Cab Management System 1.0. This affects an unknown part of the file /cms/classes/Users.php?f=delete_client. The manipulation of…
CVE-2024-51031, published 2024-11-08. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "First Name,"…
CVE-2026-36923, published 2026-04-13. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php.
CVE-2026-36922, published 2026-04-13. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php.