CVE-2023-1686

CVE-2023-1686 affects SourceCodester Young Entrepreneur E-Negosyo System 1.0, specifically the GET parameter handler in the file bsenordering/admin/category/index.php. The issue is a cross-site scripting (XSS) vulnerability caused by manipulating the view argument, e.g. via input like , which can...

CVE-2023-1686 SourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scripting

A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file bsenordering/admin/category/index.php of the component GET Parameter Handler. The manipulation of the argument view with th...

CVE-2023-1686 SourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scripting

A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file bsenordering/admin/category/index.php of the component GET Parameter Handler. The manipulation of the argument view with th...

PT-2023-17169 · Sourcecodester · Sourcecodester Young Entrepreneur E-Negosyo System

Name of the Vulnerable Software and Affected Versions: SourceCodester Young Entrepreneur E-Negosyo System version 1.0 Description: A problem was found in the processing of the file bsenordering/admin/category/index.php, specifically in the GET Parameter Handler component. The issue allows for cro...

Cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file /bsenordering/index.php of the component GET Parameter Handler. The manipulation of the argument category with the input alert222 leads to...

CVE-2023-1485

CVE-2023-1485 is an XSS vulnerability in SourceCodester Young Entrepreneur E-Negosyo System 1.0, arising from the GET parameter handler in /bsenordering/index.php where manipulating category with enables a remote XSS attack. Affected: SourceCodester Young Entrepreneur E-Negosyo System 1.0, file ...

SourceCodester Young Entrepreneur E-Negosyo System 跨站脚本漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System by janobe individual developers. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Young Entrepreneur E-Negosyo System, which stems from a problem with the file /bsenordering/index.php, whe...

Sourcecodester E-Negosyo System SQL Injection (CVE-2021-41674)

An SQL injection vulnerability exists in Sourcecodester E-Negosyo System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Sourcecodester E-Negosyo System Remote Code Execution Vulnerability

Sourcecodester E-Negosyo System is an open source online ordering system with SMS notifications. sourcecodester E-Negosyo System is vulnerable to remote code execution, which can be exploited by attackers to execute arbitrary code via the "/admin/produts/controller. php" in the doInsert function...

CVE-2021-41675

A Remote Code Execution RCE vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function, which validates images with getImageSizei...

CVE-2021-41674

An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the useremail parameter in /admin/login.php...

CVE-2021-41675

A Remote Code Execution RCE vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function, which validates images with getImageSizei...

Remote code execution

A Remote Code Execution RCE vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function, which validates images with getImageSizei...

Sql injection

An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the useremail parameter in /admin/login.php...

CVE-2021-41675

A Remote Code Execution RCE vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function, which validates images with getImageSizei...

CVE-2021-41675

Summary: CVE-2021-41675 is a Remote Code Execution in Sourcecodester E-Negosyo System 1.0. The flaw exists in the admin/produts/controller.php doInsert function, where image validation is performed via getImageSizei. Public sources across multiple feeds corroborate an RCE condition, but the exact...

CVE-2021-41674

An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the useremail parameter in /admin/login.php...

CVE-2021-41674

CVE-2021-41674 describes an SQL Injection in Sourcecodester E-Negosyo System 1.0 exploitable via the user_email parameter in /admin/login.php. Public sources in the connected documents confirm an SQL injection vulnerability with remote access characteristics (attack vector NETWORK) and no require...

Sourcecodester E-Negosyo System 代码问题漏洞

Sourcecodester E-Negosyo System is an open source online ordering system with SMS notifications. sourcecodester E-Negosyo System is vulnerable to remote code execution, which can be exploited by attackers to execute arbitrary code via the "/admin/produts/controller. php" in the doInsert function...

Young Entrepreneur E-Negosyo System 1.0 Cross Site Scripting

Exploit Title: Young Entrepreneur E-Negosyo System 1.0 - 'PRODESC' Stored Cross-Site Scripting XSS Date: 2021-10-03 Exploit Author: Jordan Glover Vendor Homepage: https://www.sourcecodester.com/php/12684/young-entrepreneur-e-negosyo-system.html Software Link:...