Vulnerabilities

TI-2023-01687 CVE-2023-1795 · GHSA-6fw5-jrqf-jjfc

SourceCodester Gadget Works Online Ordering System GET Parameter index.php cross site scripting

LOW 28

A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00549 Published 2023-04-02 No fix listed CWE-79

TI-2023-01354 CVE-2023-1433 · GHSA-6jq5-3354-7v52

SourceCodester Gadget Works Online Ordering System Products unrestricted upload

HIGH 65

A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00869 Published 2023-03-16 No fix listed CWE-434

TI-2023-01284 CVE-2023-1359 · GHSA-7gcx-83mm-qfhq

SourceCodester Gadget Works Online Ordering System Add New User cross site scripting

MEDIUM 55

A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as problematic.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00604 Published 2023-03-12 No fix listed CWE-79

TI-2023-01283 CVE-2023-1358 · GHSA-6hv6-xfrp-h8h8

SourceCodester Gadget Works Online Ordering System POST Parameter login.php sql injection

MEDIUM 43

A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00726 Published 2023-03-12 No fix listed CWE-89

TI-2021-13260 CVE-2021-34073 · GHSA-f68h-xxfw-9xqv

A Cross Site Scripting (XSS) vulnerabilty exists in Sourcecodester Gadget Works Online…

LOW 25

A Cross Site Scripting (XSS) vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00583 Published 2022-01-28 No fix listed CWE-79