CVE-2022-26169

CVE-2022-26169 affects Air Cargo Management System v1.0. The vulnerability is an SQL injection in the ref_code parameter. This is supported by multiple connected sources (e.g., Red Hat, CNVD, NVD) indicating high-severity impact (CVSS v3.1: 9.8, NETWORK, PRIVS NONE, UI NONE, C/H/I/A HIGH). No exp...

CVE-2022-30373

CVE-2022-30373 concerns Air Cargo Management System 1.0. The vulnerability is a SQL Injection in the web interface via /acms/admin/cargo_types/manage_cargo_type.php?id= where parameters are not properly filtered/escaped, enabling potentially unauthorized access to database data. Root cause per so...

CVE-2022-30372

The CVE-2022-30372 entry concerns Air Cargo Management System 1.0. Affected component: /acms/classes/Master.php?f=delete_cargo, where SQL injection occurs due to missing input filtering. Consequences described across sources include arbitrary SQL execution and potential data disclosure, with impa...

CVE-2022-30371

CVE-2022-30371 affects Air Cargo Management System 1.0. The vulnerability is a SQL injection in the admin module, specifically in cargo_types/view_cargo_type.php?id=, introduced by unsanitized input. Impact per CVSS from the records indicates high severity (CVSS‑3.1 base score 7.2) with potential...

CVE-2022-30367

Affected product: Air Cargo Management System v1.0. The CVE describes a vulnerability in which an attacker can delete files via the endpoint /acms/classes/Master.php?f=delete_img. This is the only concrete detail available across the provided documents; the root cause, affected components, and sp...

CVE-2022-30374

CVE-2022-30374 affects Air Cargo Management System 1.0, with a SQL injection vulnerability exploitable via /acms/admin/?page=transactions/manage_transaction&id= (or id). The root cause is lack of input filtering/escaping for parameters, enabling attackers to execute arbitrary SQL commands and pot...

CVE-2022-30370

CVE-2022-30370 affects Air Cargo Management System 1.0 through an SQL injection vulnerability in /acms/classes/Master.php?f=delete_cargo_type. The issue is caused by inadequate input filtering/escaping, enabling an attacker to manipulate queries and potentially access/modify data. Public records ...

CVE-2023-1564

CVE-2023-1564 is a SQL injection vulnerability in SourceCodester Air Cargo Management System 1.0, located in admin/transactions/update_status.php via the GET parameter id. Root cause is unsafe handling of the id parameter, enabling remote exploitation with publicly disclosed exploit. Exploitation...

CVE-2023-1740

CVE-2023-1740 affects SourceCodester Air Cargo Management System 1.0, where the GET Parameter Handler in admin/user/manage_user.php is vulnerable to SQL injection via the id argument. Exploitation is remote and the vulnerability has been disclosed publicly. Multiple connected sources corroborate ...

CVE-2023-2155

SourceCodester Air Cargo Management System 1.0 contains a cross-site scripting vulnerability in file classes/Master.php?f=save_cargo_type. The issue arises from manipulation of the argument name (name) leading to XSS, with remote initiation and public disclosure of exploits. The CVE-2023-2155 ent...

CVE-2023-1856

CVE-2023-1856 affects SourceCodester Air Cargo Management System 1.0. The vulnerability lies in the GET Parameter Handler for /admin/transactions/track_shipment.php, where manipulating the id parameter leads to SQL injection. This can be triggered remotely and has been disclosed publicly. Connect...