Vulnerabilities

TI-2023-02023 CVE-2023-2155 · GHSA-24x7-8mv3-v5xj

SourceCodester Air Cargo Management System cross site scripting

MEDIUM 55

A vulnerability was found in SourceCodester Air Cargo Management System 1.0.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00551 Published 2023-04-18 No fix listed CWE-79

TI-2023-01743 CVE-2023-1856 · GHSA-r7pw-mjr6-vg7x

SourceCodester Air Cargo Management System GET Parameter track_shipment.php sql injection

MEDIUM 44

A vulnerability has been found in SourceCodester Air Cargo Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00808 Published 2023-04-05 No fix listed CWE-89

TI-2023-01633 CVE-2023-1740 · GHSA-mp63-22rm-p92x

SourceCodester Air Cargo Management System GET Parameter manage_user.php sql injection

MEDIUM 43

A vulnerability was found in SourceCodester Air Cargo Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00728 Published 2023-03-30 No fix listed CWE-89

TI-2023-01476 CVE-2023-1564 · GHSA-h32j-7m2c-7x9m

SourceCodester Air Cargo Management System GET Parameter update_status.php sql injection

MEDIUM 43

A vulnerability was found in SourceCodester Air Cargo Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00796 Published 2023-03-22 No fix listed CWE-89

TI-2022-12586 CVE-2022-30367 · GHSA-pwv3-rh5h-grgj

Air Cargo Management System v1.0 is vulnerable to file deletion via /acms/classes/Master.php?f=delete_img.

LOW 30

Air Cargo Management System v1.0 is vulnerable to file deletion via /acms/classes/Master.php?f=delete_img.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0087 Published 2022-05-13 No fix listed CWE-276

TI-2022-12587 CVE-2022-30370 · GHSA-7mcw-x4g8-jg5f

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo_type.

MEDIUM 44

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo_type.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2022-05-13 No fix listed CWE-89

TI-2022-12588 CVE-2022-30371 · GHSA-3g4c-gh47-jwj2

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/view_cargo_type.php?id=.

LOW 34

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/view_cargo_type.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2022-05-13 No fix listed CWE-89

TI-2022-12589 CVE-2022-30372 · GHSA-p5gh-qfxr-5q3q

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo.

LOW 34

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2022-05-13 No fix listed CWE-89

TI-2022-12590 CVE-2022-30373 · GHSA-fjhr-xj66-jg9m

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/manage_cargo_type.php?id=.

LOW 34

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/manage_cargo_type.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2022-05-13 No fix listed CWE-89

TI-2022-12591 CVE-2022-30374 · GHSA-v5q7-8937-p3vw

Air Cargo Management System 1.0 is vulnerable to SQL Injection via…

LOW 34

Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/?page=transactions/manage_transaction&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2022-05-13 No fix listed CWE-89

TI-2022-09613 CVE-2022-26169 · GHSA-r2vr-mx7g-774q

Air Cargo Management System v1.0 was discovered to contain a SQL injection vulnerability via the ref_code parameter.

MEDIUM 45

Air Cargo Management System v1.0 was discovered to contain a SQL injection vulnerability via the ref_code parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01285 Published 2022-03-02 No fix listed CWE-89

Vulnerabilities

Filters