CVE-2025-46189

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...

CVE-2025-46192

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userpaymentupdate.php via the orderid POST parameter...

CVE-2025-46189

SourceCodester Client Database Management System 1.0 is affected by a SQL Injection in user_order_customer_update.php via the order_id POST parameter. Root cause: improper handling/validation of the order_id parameter. Impact: potential unauthorized access/modification of the database (per CVSS 3...

PT-2025-20576

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The software is susceptible to a SQL Injection issue in the 'user order customer update.php' file. The issue occurs through the order id POST parameter. Exploitation of...

CVE-2025-46188

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in the superadmin_phpmyadmin.php file. The root cause is insufficient input validation in the affected file, enabling high-impact access to confidential data, potential manipulation, and disruption (CVSS 3.1 base ...

CVE-2025-46192

CVE-2025-46192 affects SourceCodester Client Database Management System 1.0. Vulnerable component: user_payment_update.php, where SQL injection is possible via the order_id POST parameter due to improper input handling. Impact per CVSS: high confidentiality, integrity, and availability; overall c...

CVE-2025-46189

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...

CVE-2025-46188

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadminphpmyadmin.php...

CVE-2025-46193

SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in userproposalupdateorder.php...

PT-2025-20575

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description SourceCodester Client Database Management System version 1.0 is susceptible to SQL Injection through the superadmin phpmyadmin.php file. The issue allows for potential...

CVE-2025-46188

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadminphpmyadmin.php...

CVE-2025-46191

CVE-2025-46191 affects SourceCodester Client Database Management System 1.0, where an unauthenticated user can upload files through the uploaded_file_cancelled field in the file upload routine in user_payment_update.php . The vulnerability stems from inadequate validation: no proper file extensio...