# CVEs published 2024-09-29

9 CVEs were published on September 29, 2024: 0 critical, 1 high. Days are UTC.

- [CVE-2024-9328](https://cve.now/CVE-2024-9328.md): SourceCodester Advocate Office Management System edit\_client.php sql injection (CVSS 5.3, SourceCodester Advocate Office Management System)
- [CVE-2024-9327](https://cve.now/CVE-2024-9327.md): code-projects Blood Bank System forgot.php sql injection (CVSS 5.3, code-projects Blood Bank System)
- [CVE-2024-9326](https://cve.now/CVE-2024-9326.md): PHPGurukul Online Shopping Portal Admin Panel index.php sql injection (CVSS 6.9, PHPGurukul Online Shopping Portal)
- [CVE-2024-9325](https://cve.now/CVE-2024-9325.md): Intelbras InControl incontrol-service-watchdog.exe unquoted search path (CVSS 8.5, Intelbras InControl)
- [CVE-2024-9324](https://cve.now/CVE-2024-9324.md): Intelbras InControl Relatório de Operadores Page operador code injection (CVSS 5.3, Intelbras InControl)
- [CVE-2024-9323](https://cve.now/CVE-2024-9323.md): SourceCodester Inventory Management System add\_staff.php cross site scripting (CVSS 5.3, SourceCodester Inventory Management System)
- [CVE-2024-9322](https://cve.now/CVE-2024-9322.md): code-projects Supply Chain Management edit\_manufacturer.php sql injection (CVSS 5.3, code-projects Supply Chain Management)
- [CVE-2024-9321](https://cve.now/CVE-2024-9321.md): SourceCodester Online Railway Reservation System view\_details.php access control (CVSS 6.9, SourceCodester Online Railway Reservation System)
- [CVE-2024-9320](https://cve.now/CVE-2024-9320.md): SourceCodester Online Timesheet App Add Timesheet Form add-timesheet.php cross site scripting (CVSS 5.3, SourceCodester Online Timesheet App)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-09-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.