Vendors / Phone Shop Sales Management System Project Phone Shop Sales Management System Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Phone Shop Sales Management System Project records in CISA KEV No Phone Shop Sales Management System Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03442 · Published 2021-07-29 · No fix listed CWE-89
Priority MEDIUM 46
Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01836 · Published 2021-08-03 · No fix listed CWE-434
Priority MEDIUM 45
Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account takeover of the admin.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01528 · Published 2021-11-02 · No fix listed CWE-425
Priority LOW 22
Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR).
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00818 · Published 2021-07-01 · No fix listed CWE-639
Open these records in search → All records by CVSS severity
Critical3 High0 Medium1 Low0 No CVSS0