CVE-2024-2155 SourceCodester Best POS Management System index.php file inclusion

A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

CVE-2024-2156: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. Affected is an unknown function of the file adminclass.php. The manipulation of the argument img leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-2155: External Control of File Name or Path

A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

Sql injection

A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The...

CVE-2023-6898: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The...

CVE-2023-6300

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input alert1 leads to cross site scripting. It is possible to launch the attack remotely. The explo...

CVE-2023-6300

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input alert1 leads to cross site scripting. It is possible to launch the attack remotely. The explo...

CVE-2023-6301 SourceCodester Best Courier Management System GET Parameter parcel_list.php cross site scripting

A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file parcellist.php of the component GET Parameter Handler. The manipulation of the argument id with the input alert...

CVE-2023-6300 SourceCodester Best Courier Management System cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input alert1 leads to cross site scripting. It is possible to launch the attack remotely. The explo...

CVE-2023-6300: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...

CVE-2023-6301: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file parcellist.php of the component GET Parameter Handler. The manipulation of the argument id with the input leads...

PT-2023-32600 · Sourcecodester · Sourcecodester Best Courier Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Courier Management System version 1.0 Description: A problematic issue was found, allowing for cross site scripting through the manipulation of the page argument with malicious input, such as alert1. This can be exploited...

CVE-2023-46006: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edituser.php...

CVE-2023-46007: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editstaff.php...

CVE-2023-46005: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editbranch.php...

CVE-2023-46004: Unrestricted Upload of File with Dangerous Type

Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the updateuser function...

CVE-2023-5302

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Courier Management System 1.0. This issue affects some unknown processing of the component Manage Account Page. The manipulation of the argument First Name leads to cross site scripting. The attack may be...

CVE-2023-5302: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Courier Management System 1.0. This issue affects some unknown processing of the component Manage Account Page. The manipulation of the argument First Name leads to cross site scripting. The attack may be...

CVE-2023-5272

A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. This affects an unknown part of the file editparcel.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to...

CVE-2023-5272

A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. This affects an unknown part of the file editparcel.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to...