834 matches found
CVE-2025-5778
A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. Affected is an unknown function of the file /admin. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-5778 1000 Projects ABC Courier Management System admin sql injection
A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. Affected is an unknown function of the file /admin. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-5778
CVE-2025-5778 affects 1000 Projects ABC Courier Management System 1.0. The vulnerability is a SQL injection in the /admin (and related /adminSQL variants) directory triggered by manipulating the Username argument. Exploitation is described as remote and publicly disclosed. Connected documents con...
CVE-2025-5778 1000 Projects ABC Courier Management System admin sql injection
A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. Affected is an unknown function of the file /admin. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
PT-2025-24277 · 1000 Projects · Best Courier Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects ABC Courier Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /adminSQL. The manipulation of the Username argument leads to SQL injection. This issue c...
1000 Projects ABC Courier Management System Security Breach
1000 Projects ABC Courier Management System is an open source courier management system from 1000 Projects. 1000 Projects ABC Courier Management System version 1.0 has a security vulnerability , the vulnerability stems from the wrong operation of the parameter Username in the file / adminSQL ,...
CVE-2024-24407
SQL Injection vulnerability in Best Courier management system v.1.0 allows a remote attacker to obtain sensitive information via printpdets.php component...
CVE-2024-48580
SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request...
CVE-2024-48581
File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the adminclass.php component...
CVE-2023-5272
A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. This affects an unknown part of the file editparcel.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to...
CVE-2023-6898
A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The...
CVE-2023-48206
A Cross Site Scripting XSS vulnerability in GaatiTrack Courier Management System 1.0 allows a remote attacker to inject JavaScript via the page parameter to login.php or header.php...
CVE-2023-46980
An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter...
CVE-2023-46451
Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...
CVE-2023-46006
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edituser.php...
CVE-2023-46004
Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the updateuser function...
CVE-2023-5273
A vulnerability classified as problematic was found in SourceCodester Best Courier Management System 1.0. This vulnerability affects unknown code of the file manageparcelstatus.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploi...
CVE-2023-6300
A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...
CVE-2021-38084
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session...