91 matches found
CVE-2025-46190: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...
PT-2025-20575
Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description SourceCodester Client Database Management System version 1.0 is susceptible to SQL Injection through the superadmin phpmyadmin.php file. The issue allows for potential...
CVE-2025-46191
The SourceCodester Client Database Management System version 1.0 is vulnerable to Arbitrary File Upload in the user_payment_update.php script. The root cause is a lack of authentication, file extension checks, and MIME type validation when processing the uploaded_file_cancelled field. This allows...
CVE-2025-46193
SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in userproposalupdateorder.php...
CVE-2025-46189
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...
CVE-2025-46188
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadminphpmyadmin.php...
CVE-2025-46189
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...
CVE-2025-46192
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection within the user_payment_update.php file. The root cause is the incorrect operation and lack of proper sanitization of the order_id POST parameter. This vulnerability could allow an attacker to gain unauthorized ac...
CVE-2025-46190
SourceCodester Client Database Management System 1.0 is vulnerable to an SQL Injection vulnerability in the user_delivery_update.php file. The root cause is the incorrect operation of the order_id POST parameter, which allows an attacker to manipulate database queries. Successful exploitation can...
PT-2025-20576
Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The software is susceptible to a SQL Injection issue in the 'user order customer update.php' file. The issue occurs through the order id POST parameter. Exploitation of...