Vulnerabilities

TI-2023-13943 CVE-2023-29623 · GHSA-5pm3-7r4j-xvq5

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting…

MEDIUM 60

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the password parameter at /purchase_order/classes/login.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0125 Published 2023-04-14 No fix listed CWE-79

TI-2023-13942 CVE-2023-29622 · GHSA-j56m-fmmm-mpjf

Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability…

HIGH 82

Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchase_order/admin/login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01657 Published 2023-04-14 No fix listed CWE-89

TI-2023-13941 CVE-2023-29621 · GHSA-w9m5-f4fq-36pm

Purchase Order Management v1.0 was discovered to contain an arbitrary file upload…

HIGH 73

Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00985 Published 2023-04-14 No fix listed CWE-434

Vulnerabilities

Filters

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting…

Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability…

Purchase Order Management v1.0 was discovered to contain an arbitrary file upload…