5 matches found
CVE-2025-5840 SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload
A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the...
PT-2025-24347 · Unknown · Sourcecodester Client Database Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Client Database Management System. This issue affects an unknown part of the file /user update customer...
CVE-2025-46189
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...
CVE-2025-46193
The SourceCodester Client Database Management System version 1.0 is vulnerable to Remote Code Execution (RCE) . The root cause is an arbitrary file upload vulnerability located in the user_proposal_update_order.php file. An unauthenticated attacker can exploit this by uploading arbitrary files to...