Courier Management System Project
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Courier Management System Project records in CISA KEVNo Courier Management System Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 46
An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01751 · Published 2022-01-21 · No fix listed CWE-89
Priority LOW 31
Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.013 · Published 2021-03-04 · No fix listed CWE-89
Priority LOW 31
SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the ref_no (POST) parameter to admin_class.php
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.013 · Published 2021-03-04 · No fix listed CWE-89
Priority LOW 26
Courier Management System 1.0 - 'First Name' Stored XSS
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00685 · Published 2021-03-04 · No fix listed CWE-79
