Vendors / Purchase Order Management System Project Purchase Order Management System Project Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 6
CVSS high 0
Exploited now Purchase Order Management System Project records in CISA KEV No Purchase Order Management System Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 75
Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-11-28 · No fix listed CWE-434
Priority MEDIUM 63
Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.24256 · Published 2022-04-21 · No fix listed CWE-434
Priority MEDIUM 58
A vulnerability was found in SourceCodester Purchase Order Management System 1.0.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00592 · Published 2022-10-14 · No fix listed CWE-707
Priority MEDIUM 49
A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04122 · Published 2023-04-17 · No fix listed CWE-89
Priority MEDIUM 47
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_supplier.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02621 · Published 2022-04-21 · No fix listed CWE-89
Priority MEDIUM 47
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_item.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02621 · Published 2022-04-21 · No fix listed CWE-89
Priority MEDIUM 47
SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02534 · Published 2022-01-24 · No fix listed CWE-89
Priority LOW 23
A vulnerability was found in SourceCodester Purchase Order Management System 1.0.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00564 · Published 2023-04-25 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
6 0 2 0 0
THREATIST.IORead the docs