CVE-2026-5330 SourceCodester/mayuri_k Best Courier Management System User Delete ajax.php access control

A vulnerability was found in SourceCodester/mayurik Best Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deleteuser of the component User Delete Handler. Performing a manipulation of the argument ID results in improper access...

EUVD-2023-57597

Malicious code in bioql PyPI...

EUVD-2023-57596

Malicious code in bioql PyPI...

EUVD-2023-50667

Malicious code in bioql PyPI...

EUVD-2023-51132

Malicious code in bioql PyPI...

EUVD-2023-50266

Malicious code in bioql PyPI...

EUVD-2024-44507

Malicious code in bioql PyPI...

EUVD-2023-57625

Malicious code in bioql PyPI...

EUVD-2023-57595

Malicious code in bioql PyPI...

CVE-2024-24407

SQL Injection vulnerability in Best Courier management system v.1.0 allows a remote attacker to obtain sensitive information via printpdets.php component...

CVE-2024-48580

SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request...

CVE-2023-6898

A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The...

CVE-2023-46980

An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter...

CVE-2023-46451

Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...

CVE-2023-5273

A vulnerability classified as problematic was found in SourceCodester Best Courier Management System 1.0. This vulnerability affects unknown code of the file manageparcelstatus.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploi...

CVE-2023-6300

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...

CVE-2023-5269

A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been classified as critical. Affected is an unknown function of the file parcellist.php of the component GET Parameter Handler. The manipulation of the argument id/s leads to sql injection. The exploit has been...

PT-2024-33155 · Unknown · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Best courier management system in php version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the email parameter of the "login request" API endpoint. This enables the attacker to inject malicious SQL code,...

CVE-2024-48581

Affected product: Best Courier Management System (PHP) v1.0. Vulnerable component: admin_class.php via file upload, enabling remote code execution (CVE-2024-48581). Root cause: unrestricted/unsafe file upload leading to arbitrary code execution. Impact: high confidentiality, integrity, and availa...

CVE-2024-48580

CVE-2024-48580 affects Best courier management system (PHP v1.0). The vulnerability is a SQL Injection in the login request’s email parameter, enabling a remote attacker to execute arbitrary code. The CVE entry reports this as a high-severity issue with CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...