PT-2021-11907

Name of the Vulnerable Software and Affected Versions: BDTASK Multi-Store Inventory Management System version 1.0 Description: The issue allows a local admin to inject arbitrary code via the Customer Name Field. This enables the execution of malicious scripts, potentially leading to unauthorized...

SQL injection vulnerability in the bill.class.php page of UQCMS Cloud Business B2B2C Multi-store System

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. A SQL injection vulnerability exists in the bill.class.php page of the UQCMS Cloud Business B2B2C Multi-Store System due to the program's failure to adequately filte...

SQL injection vulnerability in foods_order.class.php page of UQCMS Cloud B2B2C multi-store system

B2B2C multi-store system is a B2B2C e-commerce software with PHP+MYSQL program and smarty template. A SQL injection vulnerability exists in the goodsorder.class.php page of the UQCMS Cloud Business B2B2C Multi-Store System. The vulnerability stems from the fact that the program does not adequatel...