Vulnerabilities

TI-2021-18368 CVE-2021-41675 · GHSA-77ch-x5cq-x7vw

A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0…

LOW 37

A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function, which validates images with getImageSizei.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03171 Published 2021-10-29 No fix listed CWE-434

TI-2021-18367 CVE-2021-41674 · GHSA-68qx-pph6-q269

An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the…

MEDIUM 46

An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the user_email parameter in /admin/login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01754 Published 2021-10-29 No fix listed CWE-89

Vulnerabilities

Filters

A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0…

An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the…