EUVD-2021-21980

Malware in sbrugna...

EUVD-2023-23542

Malicious code in bioql PyPI...

CVE-2021-36624

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

CVE-2021-36623

Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE...

CVE-2023-1275

A vulnerability classified as problematic was found in SourceCodester Phone Shop Sales Managements System 1.0. This vulnerability affects unknown code of the file /osms/assets/plugins/jquery-validation-1.11.1/demo/captcha/index.php of the component CAPTCHA Handler. The manipulation leads to cross...

CVE-2023-1275: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Phone Shop Sales Managements System 1.0. This vulnerability affects unknown code of the file /osms/assets/plugins/jquery-validation-1.11.1/demo/captcha/index.php of the component CAPTCHA Handler. The manipulation leads to cross...

CVE-2021-36623

Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE...

Design/Logic Flaw

Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE...

CVE-2021-36623

Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE...

CVE-2021-36623

Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE...

CVE-2021-36623: Unrestricted Upload of File with Dangerous Type

Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE...

PT-2021-21301

Name of the Vulnerable Software and Affected Versions Sourcecodester Phone Shop Sales Management System version 1.0 Description The issue allows for arbitrary file upload, which can enable remote code execution RCE in the affected system. Recommendations For version 1.0, update to a newer version...

CVE-2021-36624

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

CVE-2021-36624: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

PT-2021-21302

Name of the Vulnerable Software and Affected Versions Sourcecodester Phone Shop Sales Managements System version 1.0 Description The issue is related to a remote SQL injection vulnerability, which allows for authentication bypass. Recommendations For Sourcecodester Phone Shop Sales Managements...

CVE-2021-35337

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference IDOR. Any attacker will be able to see the invoices of different users by changing the id parameter...

CVE-2021-35337

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference IDOR. Any attacker will be able to see the invoices of different users by changing the id parameter...

CVE-2021-35337: Authorization Bypass Through User-Controlled Key

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference IDOR. Any attacker will be able to see the invoices of different users by changing the id parameter...

PT-2021-20892

Name of the Vulnerable Software and Affected Versions: Sourcecodester Phone Shop Sales Management System version 1.0 Description: The issue allows an attacker to view invoices of different users by modifying the id parameter, indicating a lack of proper access control. This could potentially expo...