Lucene search

K

Mayurik Security Vulnerabilities

cve
cve

CVE-2023-48206

A Cross Site Scripting (XSS) vulnerability in GaatiTrack Courier Management System 1.0 allows a remote attacker to inject JavaScript via the page parameter to login.php or...

6.1CVSS

6.1AI Score

0.001EPSS

2023-12-07 07:15 AM
6
cve
cve

CVE-2023-46974

Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code via a crafted payload to the page parameter in the...

5.4CVSS

7.7AI Score

0.001EPSS

2023-12-07 02:15 PM
8
cve
cve

CVE-2023-48823

A Blind SQL injection issue in ajax.php in GaatiTrack Courier Management System 1.0 allows an unauthenticated attacker to inject a payload via the email parameter during...

9.8CVSS

8.2AI Score

0.003EPSS

2023-12-07 07:15 AM
9
cve
cve

CVE-2023-46980

An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID...

9.8CVSS

8.5AI Score

0.003EPSS

2023-11-03 04:15 PM
8
cve
cve

CVE-2023-46451

Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change username...

5.4CVSS

6.5AI Score

0.0004EPSS

2023-10-31 07:15 AM
9
cve
cve

CVE-2023-46449

Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change...

8.8CVSS

7.6AI Score

0.001EPSS

2023-10-26 03:15 PM
19
cve
cve

CVE-2023-46450

Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting (XSS) via the Add supplier...

5.4CVSS

6.5AI Score

0.0004EPSS

2023-10-26 03:15 PM
21
cve
cve

CVE-2023-46005

Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in...

9.8CVSS

8.7AI Score

0.001EPSS

2023-10-18 01:15 PM
19
cve
cve

CVE-2023-46004

Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the update_user...

7.2CVSS

7.4AI Score

0.001EPSS

2023-10-18 01:15 PM
26
cve
cve

CVE-2023-46006

Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in...

9.8CVSS

8.7AI Score

0.001EPSS

2023-10-18 01:15 PM
24
cve
cve

CVE-2023-46007

Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in...

9.8CVSS

8.7AI Score

0.001EPSS

2023-10-18 01:15 PM
23