CVE-2023-48206

A Cross Site Scripting XSS vulnerability in GaatiTrack Courier Management System 1.0 allows a remote attacker to inject JavaScript via the page parameter to login.php or header.php...

CVE-2023-48206

GaatiTrack Courier Management System v1.0 contains a Cross Site Scripting (XSS) flaw exploitable via the page parameter in login.php and header.php. Public sources consistently describe reflected XSS that could allow an attacker to inject arbitrary scripts, with network access (AV:N) and user int...

CVE-2023-48823

GaatiTrack Courier Management System v1.0 is affected by a Blind SQL injection in ajax.php during login, exploitable via the email parameter by an unauthenticated attacker. The issue arises from improper handling of the email input in the login flow, enabling arbitrary SQL execution and potential...

CVE-2023-46974

The CVE concerns Best Courier Management System v1.000, where a Cross‑Site Scripting flaw in the page URL parameter allows remote code execution due to inadequate input filtering/escaping. Descriptions across CNVD/NVD/CVE references consistently identify the vulnerable component as the web input ...

PT-2023-30731 · Unknown · Gaatitrack Courier Management System

Name of the Vulnerable Software and Affected Versions: GaatiTrack Courier Management System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to inject JavaScript via the page parameter to "login.php" or "header.php". This could potentially lead to unauthorized...

GaatiTrack Courier Management System 1.0 SQL Injection

Exploit Title: GaatiTrack Courier Management System v1.0 - SQL Injection Date: 13/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.mayurik.com/ Software Link: https://www.mayurik.com/source-code/P0998/best-courier-management-system-project-in-php...

CVE-2023-6300

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input alert1 leads to cross site scripting. It is possible to launch the attack remotely. The explo...

CVE-2023-6301

A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file parcellist.php of the component GET Parameter Handler. The manipulation of the argument id with the input alert...

CVE-2023-6300

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input alert1 leads to cross site scripting. It is possible to launch the attack remotely. The explo...

Cross site scripting

A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file parcellist.php of the component GET Parameter Handler. The manipulation of the argument id with the input alert...

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input alert1 leads to cross site scripting. It is possible to launch the attack remotely. The explo...

CVE-2023-6301 SourceCodester Best Courier Management System GET Parameter parcel_list.php cross site scripting

A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file parcellist.php of the component GET Parameter Handler. The manipulation of the argument id with the input alert...

CVE-2023-6301

CVE-2023-6301 affects SourceCodester Best Courier Management System 1.0, specifically the parcel_list.php component of the GET Parameter Handler. The vulnerability arises from manipulating the id parameter with input like , causing cross-site scripting (XSS). The attack is described as remote wit...

CVE-2023-6300

CVE-2023-6300 concerns a cross-site scripting (XSS) vulnerability in SourceCodester Best Courier Management System 1.0. The issue affects an unknown function, with the attacker able to manipulate the page argument (example input: ) to trigger XSS remotely. The exploit has been publicly disclosed ...

CVE-2023-6300 SourceCodester Best Courier Management System cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input alert1 leads to cross site scripting. It is possible to launch the attack remotely. The explo...

CVE-2023-6300 SourceCodester Best Courier Management System cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input alert1 leads to cross site scripting. It is possible to launch the attack remotely. The explo...

Best Courier Management System Cross-Site Scripting Vulnerability

Best Courier Management System is a courier management system by Mayuri K. Individual developer. A cross-site scripting vulnerability exists in SourceCodester Best Courier Management System version 1.0, which stems from the presence of an unknown function that can lead to cross-site scripting by...

PT-2023-32600 · Sourcecodester · Sourcecodester Best Courier Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Courier Management System version 1.0 Description: A problematic issue was found, allowing for cross site scripting through the manipulation of the page argument with malicious input, such as alert1. This can be exploited...

GaatiTrack Courier Management System Cross-Site Scripting Vulnerability

GaatiTrack Courier Management System is a courier management system by Mayuri K. Individual developer. A cross-site scripting vulnerability exists in GaatiTrack Courier Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary web script or HTML...

PT-2023-7516 · Unknown · Gaatitrack Courier Management System

Name of the Vulnerable Software and Affected Versions: GaatiTrack Courier Management System version 1.0 Description: The issue is related to a Blind SQL injection in the ajax.php file of the GaatiTrack Courier Management System. This occurs due to inadequate protection of the SQL query structure...