CVE-2020-35329

Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '...

CVE-2020-35328

CVE-2020-35328 affects the Courier Management System 1.0. A stored cross-site scripting (XSS) vulnerability is reported in the First Name field of the application. Public references include an Exploit-DB entry, indicating exploitation awareness, but the provided documents do not give explicit exp...

CVE-2020-35328

Courier Management System 1.0 - 'First Name' Stored XSS...

CVE-2020-35327

CVE-2020-35327 affects Courier Management System 1.0. The vulnerability is an SQL injection in the ref_no parameter (POST) to admin_class.php. Root cause: unsanitized input in the SQL query leads to unauthorized data access; CVSS 3.1 vector shows network attack with low complexity and privileges ...

CVE-2020-35327

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...

PT-2021-11751

Name of the Vulnerable Software and Affected Versions: Courier Management System version 1.0 Description: A SQL injection issue was found, which can be exploited through the ref no parameter in a POST request to the "admin class.php" endpoint. This allows for potential unauthorized access and...

CVE-2020-35327: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...

Courier Management System 跨站脚本漏洞

SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functions. A cross-site scripting vulnerability exists in Courier Management System 1.0 that originates in the First Name field...

SourceCodester Courier Management System SQL注入漏洞

SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functions. Courier Management System 1.0 1.0 A SQL injection vulnerability exists, which originates in the MULTIPART street field...

PT-2021-11753

Name of the Vulnerable Software and Affected Versions: Courier Management System version 1.0 Description: The issue is related to SQL Injection via the street variable in a 'MULTIPART' context. This allows for potential exploitation. Recommendations: For version 1.0, consider restricting access t...

PT-2021-11752

Name of the Vulnerable Software and Affected Versions: Courier Management System version 1.0 Description: The issue is related to a Stored XSS in the 'First Name' field. Recommendations: For Courier Management System version 1.0, as a temporary workaround, consider restricting user input for the...

CVE-2020-35328: Improper Neutralization of Input During Web Page Generation

Courier Management System 1.0 - 'First Name' Stored XSS...

SourceCodester Courier Management System SQL注入漏洞

SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functionality. An SQL injection vulnerability exists in Courier Management System 1.0, which originates in the ref no POST parameter of admin class.php...

CVE-2020-35329: Improper Neutralization of Special Elements used in an SQL Command

Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '...

Courier: Rate limit function bypass can leads to occur huge critical problem into website.

Hello team, I have found a technique that can easily bypass rate limit system of website and with this bug we attacker can easily attack into login panel, Sent unlimited number of huge notification to victim, bypass OTP codes and takeover accounts etc. Basically i have added a header...

courriermdex.courier-connex.com Cross Site Scripting vulnerability OBB-1463836

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

courriermdex.courier-connex.com Cross Site Scripting vulnerability OBB-1414435

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

courier-record.com Improper Access Control vulnerability OBB-1381257

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Courier: Broken Authentication Session Token Bug

Hi Team Hope your are good I have found a broken authentication issue in https://www.trycourier.app Steps to reproduce 1. Create a courier account or use existing one. 2. Confirm Your email address. 3. Now log out from your account and request for password reset code for your account . 4. Don't u...

Courier: Bypass Too Many Requests Sign Up

Courier makes a rate limit check before allowing a user to register; this rate limit check can be bypassed and a user account can be created by sending a request directly to the AWS Cognito API – which is not rate limited...