Purchase Order Management Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Purchase Order Management Project records in CISA KEV

No Purchase Order Management Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Purchase Order Management 3 records HIGH

Records

3 records in Purchase Order Management · all components

TI-2023-13942 CVE-2023-29622 · GHSA-j56m-fmmm-mpjf

Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability…

HIGH 82

Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchase_order/admin/login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01657 Published 2023-04-14 No fix listed CWE-89

TI-2023-13941 CVE-2023-29621 · GHSA-w9m5-f4fq-36pm

Purchase Order Management v1.0 was discovered to contain an arbitrary file upload…

HIGH 73

Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00985 Published 2023-04-14 No fix listed CWE-434

TI-2023-13943 CVE-2023-29623 · GHSA-5pm3-7r4j-xvq5

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting…

MEDIUM 60

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the password parameter at /purchase_order/classes/login.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0125 Published 2023-04-14 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0