CVE-2021-43484

A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...

Remote code execution

A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...

CVE-2021-43484

A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...

CVE-2021-43484

CVE-2021-43484 affects Simple Client Management System 1.0, specifically the create.php file, where remote code execution arises from failure to validate the extension of a file in a request. The vulnerability is documented with a high/severe impact (CVSS v3.1: 9.8, CRITICAL, network access, no u...

CVE-2021-43505

Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...

CVE-2021-43506: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...

PT-2022-11857

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description A Remote Code Execution RCE issue exists due to the failure to validate the extension of the file being sent in a request to the create.php file. Recommendations For Simple Client...

CVE-2021-43484: Improper Neutralization of Special Elements used in an SQL Command

A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...

PT-2022-11861

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description An SQL Injection issue exists via the password parameter in Login.php. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client Management...

CVE-2021-43505: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...

PT-2022-11860

Name of the Vulnerable Software and Affected Versions Ssourcecodester Simple Client Management System version 1 Description Multiple Cross Site Scripting XSS vulnerabilities exist in the system via the Add new Client and Add new invoice features. Recommendations For Ssourcecodester Simple Client...

PT-2022-17766

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue is related to a SQL injection vulnerability. It affects the manage client endpoint via the id parameter, allowing attackers to dump the application's database using crafted HTTP...

CVE-2022-26284: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manageclient endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...

CVE-2021-43509: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php...

PT-2022-11862

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description A SQL Injection issue exists via the id parameter in "view-service.php". This allows for potential exploitation. Recommendations For Sourcecodester Simple Client Management...

PT-2022-11863

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description A SQL Injection issue exists via the username field in the "login.php" file. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client...

CVE-2021-43510: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php...

Simple Client Management System 1.0 Cross Site Scripting

Exploit Title: Simple Client Management System 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: Sentinal920 Date: 5-11-2021 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/15027/simple-client-management-system-php-source-code.html Software Link:...

Simple Client Management System 1.0 - (multiple) Stored Cross-Site Scripting Vulnerability

Exploit Title: Simple Client Management System 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: Sentinal920 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/15027/simple-client-management-system-php-source-code.html Software Link:...