CVE-2021-46198

The CVE-2021-46198 issue affects Sourceodester Courier Management System 1.0, where an SQL injection exists via the email parameter in /cms/ajax.php. The root cause is input data not being properly sanitized, enabling an attacker to manipulate SQL queries. The vulnerability is described as enabli...

CVE-2020-35328

CVE-2020-35328 affects the Courier Management System 1.0. A stored cross-site scripting (XSS) vulnerability is reported in the First Name field of the application. Public references include an Exploit-DB entry, indicating exploitation awareness, but the provided documents do not give explicit exp...

CVE-2020-35329

CVE-2020-35329 : The Courier Management System 1.0 (1.0) is affected by an SQL Injection vulnerability exploitable via the MULTIPART street field. The issue is corroborated by multiple connected documents (e.g., NVD entry and CNNVD description). The NVD metrics indicate a CVSS v3.1 base score of ...

CVE-2020-35327

CVE-2020-35327 affects Courier Management System 1.0. The vulnerability is an SQL injection in the ref_no parameter (POST) to admin_class.php. Root cause: unsanitized input in the SQL query leads to unauthorized data access; CVSS 3.1 vector shows network attack with low complexity and privileges ...