Remote code execution

A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...

CVE-2021-43484

A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...

CVE-2021-43484

CVE-2021-43484 affects Simple Client Management System 1.0, specifically the create.php file, where remote code execution arises from failure to validate the extension of a file in a request. The vulnerability is documented with a high/severe impact (CVSS v3.1: 9.8, CRITICAL, network access, no u...

CVE-2021-43506

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

CVE-2021-43505

Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...

CVE-2021-43505

Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...

CVE-2021-43505

Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...

CVE-2021-43506

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

Cross site scripting

Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...

Sql injection

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

CVE-2021-43506

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

CVE-2021-43506

The vulnerability CVE-2021-43506 affects Sourcecodester Simple Client Management System 1.0, where an SQL Injection can be triggered via the password parameter in Login.php. The root cause is improper input handling leading to unauthorized access or data exposure. Multiple sources (NVD and Red Ha...

CVE-2021-43505

Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...

CVE-2021-43505

CVE-2021-43505 affects Ssourcecodester Simple Client Management System v1. The vulnerability is described as multiple Cross-Site Scripting (XSS) issues exploitable via adding a new client or adding a new invoice. The connected documents confirm XSS in this product/version combination; no explicit...

PT-2022-11860

Name of the Vulnerable Software and Affected Versions Ssourcecodester Simple Client Management System version 1 Description Multiple Cross Site Scripting XSS vulnerabilities exist in the system via the Add new Client and Add new invoice features. Recommendations For Ssourcecodester Simple Client...

PT-2022-11857

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description A Remote Code Execution RCE issue exists due to the failure to validate the extension of the file being sent in a request to the create.php file. Recommendations For Simple Client...

PT-2022-11861

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description An SQL Injection issue exists via the password parameter in Login.php. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client Management...

CVE-2021-43484: Improper Neutralization of Special Elements used in an SQL Command

A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...

CVE-2021-43506: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

CVE-2021-43505: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...