Vulnerabilities

TI-2021-21108 CVE-2021-46198 · GHSA-4392-jjcv-v827

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via…

MEDIUM 46

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01751 Published 2022-01-21 No fix listed CWE-89

TI-2020-17943 CVE-2020-35329 · GHSA-fcmp-pc8h-ff6j

Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '.

LOW 31

Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.013 Published 2021-03-04 No fix listed CWE-89

TI-2020-17942 CVE-2020-35328 · GHSA-jc34-5g4w-8xm5

Courier Management System 1.0 - 'First Name' Stored XSS

LOW 26

Courier Management System 1.0 - 'First Name' Stored XSS

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00685 Published 2021-03-04 No fix listed CWE-79

TI-2020-17941 CVE-2020-35327 · GHSA-f9j7-g2gf-qjjv

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be…

LOW 31

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the ref_no (POST) parameter to admin_class.php

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.013 Published 2021-03-04 No fix listed CWE-89

Vulnerabilities

Filters

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via…

Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '.

Courier Management System 1.0 - 'First Name' Stored XSS

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be…