893 matches found
Remote code execution
Purchase Order Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /purchaseorder/admin/?page=user...
CVE-2022-28021
Purchase Order Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /purchaseorder/admin/?page=user...
CVE-2022-28021
CVE-2022-28021 affects Purchase Order Management System v1.0. The Red Hat, NVD, CVE listing and related sources document a remote code execution (RCE) vulnerability accessible via the web path: /purchase_order/admin/?page=user. The descriptions consistently state an RCE condition but do not provi...
CVE-2022-28022
CVE-2022-28022 concerns the Purchase Order Management System v1.0, where a SQL injection vulnerability exists in the delete_item path exposed by /purchase_order/classes/Master.php?f=delete_item. The issue arises from insecure handling of input in the affected function, enabling an attacker to cra...
CVE-2022-28022
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deleteitem...
CVE-2022-28023
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchaseorder/classes/Master.php?f=deletesupplier...
CVE-2022-28023
CVE-2022-28023 affects Purchase Order Management System v1.0. The vulnerability is a SQL injection in the endpoint /purchase_order/classes/Master.php?f=delete_supplier, allowing potentially arbitrary SQL execution. The CVSS metrics in the initial entry indicate a high/critical impact (C/I/A CONFI...
Purchase Order Management System 代码问题漏洞
Purchase Order Management System is a purchase order management system by Carlo Montero Personal Developer. Purchase Order Management System v1.0 has a security vulnerability that can be exploited by attackers via /purchaseorder/admin/?page=user...
Purchase Order Management System SQL注入漏洞
Purchase Order Management System is a purchase order management system. Purchase Order Management System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
Purchase Order Management System SQL注入漏洞
Purchase Order Management System is a purchase order management system. Purchase Order Management System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
CVE-2022-23884
Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::read packet deserializer...
Mojang Bedrock Dedicated Server 输入验证错误漏洞
Mojang Bedrock Dedicated Server is an official Minecraft Bedrock Edition server software from the Swedish company Mojang. Mojang Bedrock Dedicated Server is vulnerable to an integer overflow vulnerability that can be exploited by remote attackers to cause a PurchaseReceiptPacket::read packet...
Use This Definitive RFP Template to Effectively Evaluate XDR solutions
A new class of security tools is emerging that promises to significantly improve the effectiveness and efficiency of threat detection and response. Emerging Extended Detection and Response XDR solutions aim to aggregate and correlate telemetry from multiple detection controls and then synthesize...
February 8, 2022—KB5010403 (Security-only update)
None None...
No minOutAmount amount checks when buying
Lines of code Vulnerability details The tokenOutPrice can be changed with the setTokenOutPrice even if the sale is already running. Users might accept the current token price, send a purchase transaction, and before it is mined the token price can be un-intentionally changed. The user might recei...
SourceCodester Purchase Order Management System SQL注入漏洞
Sourcecodester Purchase Order Management System is a simple purchase order management system used to manage the purchase order records of a particular company. SQL injection vulnerability exists in Sourcecodester Purchase Order Management System, which Sourcecodester Purchase Order Management...
CVE-2021-40908
SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...
CVE-2021-40908
SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...
Sql injection
SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...
