CVE-2022-44400

Purchase Order Management System v1.0 contains a file upload vulnerability via /purchaseorder/admin/?page=systeminfo...

CVE-2022-44400

Purchase Order Management System v1.0 contains a file upload vulnerability via /purchaseorder/admin/?page=systeminfo...

Unrestricted file upload

Purchase Order Management System v1.0 contains a file upload vulnerability via /purchaseorder/admin/?page=systeminfo...

Purchase Order Management System 代码问题漏洞

Purchase Order Management System is a Purchase Order Management System by Carlo Montero Personal Developer. A code issue vulnerability exists in Purchase Order Management System v1.0, which was discovered via /purchaseorder/admin/?page=systeminfo contains a file upload vulnerability...

CVE-2022-44400

Purchase Order Management System v1.0 contains a file upload vulnerability via /purchaseorder/admin/?page=systeminfo...

CVE-2022-44400

CVE-2022-44400 affects Purchase Order Management System v1.0. The vulnerability is an unrestricted file upload exposed at /purchase_order/admin/?page=system_info, described as a file upload vulnerability. CVSS v3.1 metrics indicate a CRITICAL impact (C/H, I/H, A/H) with NETWORK attack vector, LOW...

PT-2022-27211 · Unknown · Purchase Order Management System

Name of the Vulnerable Software and Affected Versions: Purchase Order Management System version 1.0 Description: The issue concerns a file upload vulnerability. It can be exploited via the /purchase order/admin/?page=system info API endpoint. Recommendations: For Purchase Order Management System...

CVE-2022-44400

Purchase Order Management System v1.0 contains a file upload vulnerability via /purchaseorder/admin/?page=systeminfo...

PT-2022-24565 · Maxon · Maxon Erp

Name of the Vulnerable Software and Affected Versions: Maxon ERP affected versions not specified Description: A critical vulnerability has been found in Maxon ERP, affecting the file /index.php/purchase order/browse data. The manipulation of the tb search argument leads to SQL injection. It is...

CVE-2022-3503

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site...

CVE-2022-3503

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site...

Cross site scripting

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site...

Purchase Order Management System 跨站脚本漏洞

Purchase Order Management System is a purchase order management system developed by Carlo Montero. A security vulnerability exists in Purchase Order Management System version 1.0, which is a cross-site scripting vulnerability caused by manipulation of the parameter "page"...

CVE-2022-3503

CVE-2022-3503 affects SourceCodester Purchase Order Management System 1.0, specifically the Supplier Handler component. The vulnerability is a cross-site scripting (XSS) flaw caused by manipulating the arguments Supplier Name/Address/Contact person/Contact, which can be exploited remotely. The ex...

Purchase Order Management System 安全漏洞

Purchase Order Management System is a purchase order management system developed by Carlo Montero. A security vulnerability exists in Purchase Order Management System version 1.0, which is a cross-site scripting vulnerability caused by incorrect manipulation of the parameter "Name/Address/Contact...

CVE-2022-3503 SourceCodester Purchase Order Management System Supplier cross site scripting

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site...

Purchase Order Management System SQL注入漏洞

Purchase Order Management System is a purchase order management system by Carlo Montero, an individual developer. A security vulnerability exists in Purchase Order Management System version 1.0, which is caused by a sql injection due to manipulation of the parameter id...

PT-2022-22509 · Sourcecodester · Sourcecodester Purchase Order Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Purchase Order Management System version 1.0 Description: A vulnerability was found in the Supplier Handler component, where the manipulation of the Supplier Name, Address, Contact person, or Contact argument leads to cross-sit...

Glovo: Integer overflow vulnerability

Summary: In one of my previous reports i send parameter tampering report vulnerability. Then you asked me to send PoC and you just closed it, that's why i'm sending you this new report with exactly name of vulnerability. Integer Overflows are closely related to other conditions that occur when...

Purchase Order Management System SQL注入漏洞（CNVD-2022-44236）

Purchase Order Management System is a purchase order management system. Purchase Order Management System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...