831 matches found
CVE-2023-46004
Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the updateuser function...
CVE-2023-46005
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editbranch.php...
CVE-2023-46005
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editbranch.php...
Sql injection
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editstaff.php...
Sql injection
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edituser.php...
Sql injection
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editbranch.php...
CVE-2023-46007
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editstaff.php...
CVE-2023-46005
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editbranch.php...
CVE-2023-46005
CVE-2023-46005 affects Sourcecodester Best Courier Management System 1.0. The vulnerability is an SQL Injection via the id parameter in /edit_branch.php, arising from inadequate input handling. CVSS 3.1 base score 9.8 (CRITICAL) with Network attack vector, no user interaction, and impact to confi...
Best Courier Management System Code Issue Vulnerability
Best Courier Management System is a courier management system by Mayuri K., a personal developer. A security vulnerability exists in Best Courier Management System version 1.0, which was discovered to contain an arbitrary file upload vulnerability via the updateuser function...
Best Courier Management System SQL Injection Vulnerability
Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System version 1.0, which was discovered to contain an SQL injection vulnerability via the id parameter in the /editstaff.php function...
CVE-2023-46007
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editstaff.php...
CVE-2023-46004
The collected documents confirm a vulnerability in Sourcecodester Best Courier Management System 1.0: an Arbitrary file upload flaw in the update_user function. This indicates a problematic upload handling path that can be abused to upload arbitrary files. No detailed exploit steps, affected file...
CVE-2023-46005
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editbranch.php...
PT-2023-29789 · Sourcecodester · Sourcecodester Best Courier Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Best Courier Management System version 1.0 Description: The issue is related to SQL Injection, which occurs via the id parameter in the "/edit branch.php" API endpoint. This allows for potential exploitation. No information is...
Best Courier Management System SQL Injection Vulnerability
Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System version 1.0, which was discovered to contain an SQL injection vulnerability via the id parameter in the /edituser.php function...
CVE-2023-46006
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edituser.php...
CVE-2023-46006
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the id parameter in /edit_user.php. The CVE-2023-46006 entries in multiple feeds consistently describe an insecure input handling that enables SQL injection, with CVSS 3.1 metrics indicating network attack vector...
PT-2023-29790 · Sourcecodester · Sourcecodester Best Courier Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Best Courier Management System version 1.0 Description: The issue is related to SQL Injection via the parameter id in the "/edit user.php" API endpoint. This allows for potential exploitation. No information is provided about t...