Priority HIGH 82
File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the admin_class.php component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01087 · Published 2024-10-25 · No fix listed CWE-94
Priority HIGH 82
SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00889 · Published 2024-10-25 · No fix listed CWE-89
Priority LOW 26
A vulnerability was found in SourceCodester Best Courier Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00869 · Published 2024-05-16 · No fix listed CWE-434
Priority MEDIUM 63
SQL Injection vulnerability in Best Courier management system v.1.0 allows a remote attacker to obtain sensitive information via print_pdets.php component.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00603 · Published 2024-03-28 · No fix listed CWE-89
Priority HIGH 75
A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00649 · Published 2023-12-17 · No fix listed CWE-89
Priority LOW 28
A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00608 · Published 2023-11-26 · No fix listed CWE-79
Priority MEDIUM 60
A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00608 · Published 2023-11-26 · No fix listed CWE-79
Priority MEDIUM 53
An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01888 · Published 2023-11-03 · No fix listed CWE-94
Priority MEDIUM 58
Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change username field.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00484 · Published 2023-10-31 · No fix listed CWE-79
Priority HIGH 82
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_staff.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00832 · Published 2023-10-18 · No fix listed CWE-89
Priority HIGH 82
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_user.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00832 · Published 2023-10-18 · No fix listed CWE-89
Priority HIGH 82
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_branch.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00832 · Published 2023-10-18 · No fix listed CWE-89
Priority HIGH 67
Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the update_user function.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00822 · Published 2023-10-18 · No fix listed CWE-434
Priority MEDIUM 58
A vulnerability, which was classified as problematic, has been found in SourceCodester Best Courier Management System 1.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00642 · Published 2023-09-30 · No fix listed CWE-79
Priority LOW 25
A vulnerability classified as problematic was found in SourceCodester Best Courier Management System 1.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00592 · Published 2023-09-29 · No fix listed CWE-79
Priority LOW 39
A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00751 · Published 2023-09-29 · No fix listed CWE-89
Priority HIGH 71
A vulnerability was found in SourceCodester Best Courier Management System 1.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00751 · Published 2023-09-29 · No fix listed CWE-89
Priority HIGH 73
A vulnerability was found in SourceCodester Best Courier Management System 1.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00751 · Published 2023-09-29 · No fix listed CWE-89
Priority MEDIUM 56
A vulnerability was found in SourceCodester Best Courier Management System 1.0.
CVSS 4.0MEDIUM 5.1· Adjacent network · Low privileges · No interaction · EPSS 0.0077 · Published 2023-09-29 · No fix listed CWE-74
THREATIST.IORead the docs