CVE-2023-23279

Inyección SQL en Canteen Management System v1.0. Autor del bug: Tuannq Fecha de descubrimiento: 5/1/2023 Proveedor: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html Cuenta de inicio de sesión: [email protected]/rootadmin Cuenta de Super Admin...

CVE-2026-78060

A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /phpaction/getOrderReport.php. Performing a manipulation of the argument clientName/clientContact results in cross site scripting. It is possible to initiate the attack...

CVE-2026-78060 SourceCodester Stock Management System getOrderReport.php cross site scripting

A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /phpaction/getOrderReport.php. Performing a manipulation of the argument clientName/clientContact results in cross site scripting. It is possible to initiate the attack...

CVE-2026-78060

A cross-site scripting (XSS) vulnerability exists in SourceCodester Stock Management System 1.0 in the file /php_action/getOrderReport.php. Manipulating the clientName or clientContact arguments allows remote, unauthenticated attackers to inject malicious scripts, resulting in a low integrity imp...

EUVD-2026-64625

A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /phpaction/getOrderReport.php. Performing a manipulation of the argument clientName/clientContact results in cross site scripting. It is possible to initiate the attack...

CVE-2026-78060 SourceCodester Stock Management System getOrderReport.php cross site scripting

A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /phpaction/getOrderReport.php. Performing a manipulation of the argument clientName/clientContact results in cross site scripting. It is possible to initiate the attack...

CVE-2026-78060: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /phpaction/getOrderReport.php. Performing a manipulation of the argument clientName/clientContact results in cross site scripting. It is possible to initiate the attack...

PT-2026-79754

A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /php action/getOrderReport.php. Performing a manipulation of the argument clientName/clientContact results in cross site scripting. It is possible to initiate the attack...

EUVD-2022-46259

Malicious code in bioql PyPI...

EUVD-2022-37855

Malicious code in bioql PyPI...

CVE-2022-43215

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

CVE-2023-23279

Canteen Management System 1.0 is vulnerable to SQL Injection via /phpaction/getOrderReport.php...

Sql injection

Canteen Management System 1.0 is vulnerable to SQL Injection via /phpaction/getOrderReport.php...

CVE-2023-23279: Improper Neutralization of Special Elements used in an SQL Command

Canteen Management System 1.0 is vulnerable to SQL Injection via /phpaction/getOrderReport.php...

PT-2023-18885

Name of the Vulnerable Software and Affected Versions Canteen Management System version 1.0 Description The issue allows for SQL Injection via the "/php action/getOrderReport.php" API endpoint. Recommendations For Canteen Management System version 1.0, consider restricting access to the "/php...

Billing System Project getOrderReport.php SQL Injection Vulnerability

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the endDate parameter in getOrderReport.php against an externally entered SQL statement. An attacker...

CVE-2022-43215

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

Sql injection

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

CVE-2022-43215

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

CVE-2022-43215

CVE-2022-43215 affects Billing System Project v1.0. The vulnerability is a SQL injection in the endDate parameter of the getOrderReport.php endpoint, as described across multiple sources. The issue arises from lack of input validation, enabling an attacker to influence SQL queries and potentially...