CVE-2023-1275

A vulnerability classified as problematic was found in SourceCodester Phone Shop Sales Managements System 1.0. This vulnerability affects unknown code of the file /osms/assets/plugins/jquery-validation-1.11.1/demo/captcha/index.php of the component CAPTCHA Handler. The manipulation leads to cross...

CVE-2021-36624

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

CVE-2023-1275: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Phone Shop Sales Managements System 1.0. This vulnerability affects unknown code of the file /osms/assets/plugins/jquery-validation-1.11.1/demo/captcha/index.php of the component CAPTCHA Handler. The manipulation leads to cross...

PT-2021-21289

Name of the Vulnerable Software and Affected Versions Phone Shop Sales Managements System using PHP with Source Code version 1.0 Description The issue concerns an authentication bypass, which can lead to account takeover of the admin. This allows unauthorized access to the system, potentially...

CVE-2021-36560: Direct Request

Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account takeover of the admin...

Phone Shop Sales Managements System 授权问题漏洞

SourceCodester Phone Shop Sales Managements System is a PHP project from SourceCodester, Inc. that manages phone store sales transactions. An authorization issue vulnerability exists in PHP Phone Shop Sales Managements System, which arises from a lack of valid permission grants and access control...

PT-2021-21302

Name of the Vulnerable Software and Affected Versions Sourcecodester Phone Shop Sales Managements System version 1.0 Description The issue is related to a remote SQL injection vulnerability, which allows for authentication bypass. Recommendations For Sourcecodester Phone Shop Sales Managements...

CVE-2021-36624: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

CVE-2021-35337: Authorization Bypass Through User-Controlled Key

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference IDOR. Any attacker will be able to see the invoices of different users by changing the id parameter...

Sourcecodester Phone Shop Sales Managements System 安全漏洞

SourceCodester Phone Shop Sales Managements System is a PHP project by SourceCodester, Inc. to manage phone store sales transactions. A security vulnerability exists in Sourcecodester Phone Shop Sales Managements System, which stems from the fact that Sourcecodester Phone Shop Sales Managements...