CVE-2023-29623

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...

CVE-2023-29621

Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server...

CVE-2023-29621

Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server...

Cross site scripting

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...

CVE-2023-29622

Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchaseorder/admin/login.php...

Purchase Order Management 跨站脚本漏洞

Sourcecodester Purchase Order Management System is a simple purchase order management system used to manage the purchase order records of a particular company. A security vulnerability exists in Purchase Order Management v1.0, which was discovered to contain a Reflected Cross Site Scripting XSS...

CVE-2023-29622

Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchaseorder/admin/login.php...

CVE-2023-29623

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...

PT-2023-22334 · Unknown · Purchase Order Management

Name of the Vulnerable Software and Affected Versions: Purchase Order Management version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the password parameter at the "/purchase order/admin/login.php" API endpoint. Recommendations: F...

CVE-2023-29621

Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server...

CVE-2023-29623

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...

Sourcecodester Purchase Order Management System 代码问题漏洞

Sourcecodester Purchase Order Management System is a simple purchase order management system for managing the purchase order records of a particular company. A security vulnerability exists in Sourcecodester Purchase Order Management System v1.0. An attacker can exploit this vulnerability to...

CVE-2023-29623

CVE-2023-29623 : Purchase Order Management v1.0 contains a reflected XSS vulnerability exploitable via the password parameter in /purchase_order/classes/login.php. The Nuclei template corroborates this finding and describes the impact as malicious scripts executing in a victim’s browser, potentia...

CVE-2023-29621

CVE-2023-29621 concerns Purchase Order Management v1.0, where an arbitrary file upload vulnerability may allow attackers to execute arbitrary code on the server via crafted uploads. The provided connected documents confirm the affected software and the underlying issue, but do not specify any ven...

CVE-2023-29622

CVE-2023-29622 affects Purchase Order Management v1.0 via a SQL injection in /purchase_order/admin/login.php using the password parameter. Affected software/component: Purchase Order Management v1.0. Root cause: insufficient input sanitization leading to arbitrary SQL execution. Impact per source...

CVE-2022-33959

IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users. IBM X-Force ID: 229320...

CVE-2022-33959

IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users. IBM X-Force ID: 229320...

Input validation

IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users. IBM X-Force ID: 229320...

CVE-2022-34333

IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 229698...

CVE-2022-34333

IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 229698...