PT-2023-18376 · Campcodes · Campcodes Coffee Shop Pos System

Name of the Vulnerable Software and Affected Versions: Campcodes Coffee Shop POS System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /admin/user/manage user.php. The manipulation of the id argument leads to sql injection, allowi...

PT-2022-22866 · Sourcecodester · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Cold Storage Management System version 1.0 Description: A vulnerability was found in the Avatar Handler component, affecting the file /csms/admin/?page=user/manage user. This issue leads to unrestricted upload and can be...

PT-2022-21297

Name of the Vulnerable Software and Affected Versions Prison Management System version 1.0 Description The issue is related to a SQL injection vulnerability. It occurs via the id parameter at the "/pms/admin/user/manage user.php" endpoint. Recommendations For Prison Management System version 1.0,...

CVE-2018-9108: Cross-Site Request Forgery (CSRF)

CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges...

PT-2018-18857

Name of the Vulnerable Software and Affected Versions QuickAppsCMS version 2.0.0-beta2 Description The issue allows an unauthorized remote attacker to create an account with admin privileges due to a CSRF vulnerability in the /admin/user/manage/add API endpoint. Recommendations For QuickAppsCMS...