TI-2023-01354 CVE-2023-1433 · GHSA-6jq5-3354-7v52
SourceCodester Gadget Works Online Ordering System Products unrestricted upload
Priority HIGH 65
A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0.
Gadget Works Online Ordering System Project
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Gadget Works Online Ordering System Project records in CISA KEVNo Gadget Works Online Ordering System Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2023-01284 CVE-2023-1359 · GHSA-7gcx-83mm-qfhq
SourceCodester Gadget Works Online Ordering System Add New User cross site scripting
Priority MEDIUM 55
A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as problematic.
TI-2023-01283 CVE-2023-1358 · GHSA-6hv6-xfrp-h8h8
SourceCodester Gadget Works Online Ordering System POST Parameter login.php sql injection
Priority MEDIUM 43
A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0.
TI-2023-01687 CVE-2023-1795 · GHSA-6fw5-jrqf-jjfc
SourceCodester Gadget Works Online Ordering System GET Parameter index.php cross site scripting
Priority LOW 28
A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0.
TI-2021-13260 CVE-2021-34073 · GHSA-f68h-xxfw-9xqv
A Cross Site Scripting (XSS) vulnerabilty exists in Sourcecodester Gadget Works Online…
Priority LOW 25
A Cross Site Scripting (XSS) vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php.