419 matches found
CVE-2025-46192
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userpaymentupdate.php via the orderid POST parameter...
CVE-2025-46193
SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in userproposalupdateorder.php...
CVE-2025-46188
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadminphpmyadmin.php...
CVE-2025-46189
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...
CVE-2025-46191: Improper Control of Generation of Code
Arbitrary File Upload in userpaymentupdate.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploadedfilecancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attacker...
CVE-2025-46190
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...
PT-2025-20582
Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The software is susceptible to a SQL Injection issue within the user payment update.php file. The issue occurs through the order id POST parameter. The vulnerability allo...
CVE-2025-46190
SourceCodester Client Database Management System 1.0 is vulnerable to an SQL Injection vulnerability in the user_delivery_update.php file. The root cause is the incorrect operation of the order_id POST parameter, which allows an attacker to manipulate database queries. Successful exploitation can...
CVE-2025-46192: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userpaymentupdate.php via the orderid POST parameter...
CVE-2025-46189
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...
CVE-2025-46189: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...
CVE-2025-46193: Unrestricted Upload of File with Dangerous Type
SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in userproposalupdateorder.php...
PT-2025-20576
Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The software is susceptible to a SQL Injection issue in the 'user order customer update.php' file. The issue occurs through the order id POST parameter. Exploitation of...
CVE-2025-46192
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection within the user_payment_update.php file. The root cause is the incorrect operation and lack of proper sanitization of the order_id POST parameter. This vulnerability could allow an attacker to gain unauthorized ac...
CVE-2025-46193
The SourceCodester Client Database Management System version 1.0 is vulnerable to Remote Code Execution (RCE) . The root cause is an arbitrary file upload vulnerability located in the user_proposal_update_order.php file. An unauthenticated attacker can exploit this by uploading arbitrary files to...
CVE-2025-46190
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...
CVE-2025-46188
SourceCodester Client Database Management System version 1.0 is vulnerable to an SQL Injection within the superadmin_phpmyadmin.php file. The root cause is insufficient input validation when processing requests to this specific file, which can lead to unauthorized database access and manipulation...
CVE-2025-46188: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadminphpmyadmin.php...
CVE-2025-46189
SourceCodester Client Database Management System version 1.0 is vulnerable to SQL Injection in the user_order_customer_update.php file. The vulnerability is caused by the incorrect operation of the order_id POST parameter, which allows an attacker to inject malicious SQL code. Successful exploita...