ORETNOM23 Online Id Generator System vulnerabilities

7 CVEs affecting ORETNOM23 Online Id Generator System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-40074, published 2025-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-40071, published 2025-04-16. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/SystemSettings.php?f=update_settings. This vulnerability allows…
CVE-2024-40073, published 2025-04-16. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at id_generator/admin/?page=generate&template=4.
CVE-2024-40072, published 2025-04-16. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/admin/?page=generate/index&id=1.
CVE-2024-40069, published 2025-04-16. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/Users.php?f=save, and the point of vulnerability is in the POST…
CVE-2024-40074, published 2025-04-16. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/SystemSettings.php?f=update_settings, and the point of vulnerability…
CVE-2024-40070, published 2025-04-16. Medium severity, CVSS 5.1. EPSS: 0.3% chance of exploitation in the next 30 days. Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/Users.php?f=save. This vulnerability allows attackers to…
CVE-2024-40068, published 2025-04-16. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/admin/?page=templates/manage_template&id=1.