CVE-2021-28374

The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's...

Debian courier-authlib 配置错误漏洞

Debian courier-authlib is a Debian open source application. It provides authentication services for other Courier applications. A misconfiguration vulnerability exists in the Debian courier-authlib package before 0.71.1-2, which stems from the possibility of including plaintext passwords in certa...

CVE-2020-35327

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...

CVE-2020-35327

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...

CVE-2020-35328

Courier Management System 1.0 - 'First Name' Stored XSS...

CVE-2020-35329

Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '...

CVE-2020-35328

Courier Management System 1.0 - 'First Name' Stored XSS...

CVE-2020-35329

Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '...

Cross site scripting

Courier Management System 1.0 - 'First Name' Stored XSS...

Sql injection

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...

Sql injection

Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '...

CVE-2020-35329

Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '...

CVE-2020-35329

CVE-2020-35329 : The Courier Management System 1.0 (1.0) is affected by an SQL Injection vulnerability exploitable via the MULTIPART street field. The issue is corroborated by multiple connected documents (e.g., NVD entry and CNNVD description). The NVD metrics indicate a CVSS v3.1 base score of ...

CVE-2020-35328

Courier Management System 1.0 - 'First Name' Stored XSS...

CVE-2020-35328

CVE-2020-35328 affects the Courier Management System 1.0. A stored cross-site scripting (XSS) vulnerability is reported in the First Name field of the application. Public references include an Exploit-DB entry, indicating exploitation awareness, but the provided documents do not give explicit exp...

CVE-2020-35327

CVE-2020-35327 affects Courier Management System 1.0. The vulnerability is an SQL injection in the ref_no parameter (POST) to admin_class.php. Root cause: unsanitized input in the SQL query leads to unauthorized data access; CVSS 3.1 vector shows network attack with low complexity and privileges ...

CVE-2020-35327

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...

Courier Management System 跨站脚本漏洞

SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functions. A cross-site scripting vulnerability exists in Courier Management System 1.0 that originates in the First Name field...

SourceCodester Courier Management System SQL注入漏洞

SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functionality. An SQL injection vulnerability exists in Courier Management System 1.0, which originates in the ref no POST parameter of admin class.php...

SourceCodester Courier Management System SQL注入漏洞

SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functions. Courier Management System 1.0 1.0 A SQL injection vulnerability exists, which originates in the MULTIPART street field...