Lucene search

Purchase Order Management Project Security Vulnerabilities

cve

CVE-2023-29621

Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server.

8.8CVSS

8.9AI Score

0.002EPSS

2023-04-14 02:15 AM

cve

CVE-2023-29622

Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchase_order/admin/login.php.

9.8CVSS

9.8AI Score

0.002EPSS

2023-04-14 02:15 AM

cve

CVE-2023-29623

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the password parameter at /purchase_order/classes/login.php.

6.1CVSS

6.1AI Score

0.001EPSS

2023-04-14 02:15 AM

181