CVE-2025-13302

Summary (validated by connected sources): The Courier Management System 1.0 is affected by a SQL injection in the file /add-new-officer.php, triggered by manipulating the ManagerName parameter. This vulnerability is remotely exploitable, and multiple sources report public exploitation details. Im...

CVE-2025-11553: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-courier.php. Executing manipulation of the argument Shippername can lead to sql injection. The attack can be launched remotely. The exploit ha...

PT-2024-16402

Name of the Vulnerable Software and Affected Versions code-projects Courier Management System version 1.0 Description A critical issue has been identified in the code-projects Courier Management System, affecting the /track-result.php file. The manipulation of the Consignment argument leads to SQ...