CVE-2024-10607

A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /track-result.php. The manipulation of the argument Consignment leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2024-10608

CVE-2024-10608 affects code-projects Courier Management System v1.0. The issue is an SQL injection in the /login.php login handler caused by unsafely handling the txtusername parameter. Exploitation is possible remotely and the vulnerability has been publicly disclosed. Several sources (Red Hat a...

CVE-2024-10607 code-projects Courier Management System track-result.php sql injection

A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /track-result.php. The manipulation of the argument Consignment leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2024-10607

The CVE-2024-10607 entry concerns code-projects Courier Management System 1.0. An SQL injection vulnerability exists in the /track-result.php file, triggered by manipulating the Consignment parameter. The issue is exploitable remotely and is disclosed publicly. The vulnerability affects confident...

PT-2024-16403 · Code Projects · Code-Projects Courier Management System

Name of the Vulnerable Software and Affected Versions: code-projects Courier Management System version 1.0 Description: A critical issue affects the processing of the file /login.php, where the manipulation of the txtusername argument leads to SQL injection. The attack may be initiated remotely...

Courier Management System /login.php File SQL Injection Vulnerability

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that originates from improper handling of the txtusername parameter in the /login.php file. An attacker could exploit this vulnerability to disclose sensitive information...

CVE-2024-48581

File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the adminclass.php component...

CVE-2024-48580

SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request...

PT-2024-33155 · Unknown · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Best courier management system in php version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the email parameter of the "login request" API endpoint. This enables the attacker to inject malicious SQL code,...

Best Courier Management System 安全漏洞

Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System version v.1.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the adminclass.php component...

CVE-2024-48581

File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the adminclass.php component...

PT-2024-33156 · Unknown · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Best courier management system version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the admin class.php component. This is due to a File Upload vulnerability in the Best courier management system in php...

Best Courier Management System 安全漏洞

Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System version v.1.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the email parameter of a login request...

CVE-2024-48581

Affected product: Best Courier Management System (PHP) v1.0. Vulnerable component: admin_class.php via file upload, enabling remote code execution (CVE-2024-48581). Root cause: unrestricted/unsafe file upload leading to arbitrary code execution. Impact: high confidentiality, integrity, and availa...

CVE-2024-48581

File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the adminclass.php component...

CVE-2024-48580

CVE-2024-48580 affects Best courier management system (PHP v1.0). The vulnerability is a SQL Injection in the login request’s email parameter, enabling a remote attacker to execute arbitrary code. The CVE entry reports this as a high-severity issue with CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

Tenant courier management 1.0 Insecure Settings

============================================================================================================================================= | Title : Tenant courier management v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefo...

Courier Management System 2020-1.0 SQL Injection

Titles: courier-management-system-2020-1.0 Multiple-SQLi Author: nu11secur1ty Date: 08/12/2024 Vendor: https://github.com/oretnom23 Software: https://www.sourcecodester.com/php/14611/courier-management-system-using-phpmysqli-source-code.htmlcomment-105424 Reference:...

CVE-2024-4945

A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file viewparcel.php. The manipulation of the argument id leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2024-4945

A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file viewparcel.php. The manipulation of the argument id leads to unrestricted upload. It is possible to launch the attack remotely. The...