Priority MEDIUM 64
A vulnerability was determined in SourceCodester Client Database Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00414 · Published 2026-03-08 · No fix listed CWE-266
Priority HIGH 70
A vulnerability has been found in SourceCodester Client Database Management System 1.0/3.1.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00547 · Published 2026-03-08 · No fix listed CWE-266
Priority MEDIUM 57
A flaw has been found in SourceCodester Client Database Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00372 · Published 2026-03-08 · No fix listed CWE-266
Priority HIGH 70
A flaw has been found in SourceCodester Client Database Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00414 · Published 2026-03-08 · No fix listed CWE-266
Priority MEDIUM 57
A flaw has been found in SourceCodester Client Database Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00348 · Published 2025-12-18 · No fix listed CWE-284
Priority MEDIUM 64
A Cross-Site Request Forgery (CSRF) vulnerability in the SourceCodester Client Database Management System 1.0 allows an attacker to cause an authenticated administrative user to perform user deletion actions without thei…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.0021 · Published 2025-11-10 · No fix listed CWE-352
Priority HIGH 70
A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00506 · Published 2025-06-07 · No fix listed CWE-284
Priority HIGH 70
A vulnerability was found in SourceCodester Client Database Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00686 · Published 2025-05-28 · No fix listed CWE-284
Priority MEDIUM 56
A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00449 · Published 2025-05-26 · No fix listed CWE-74
Priority HIGH 70
A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00562 · Published 2025-05-20 · No fix listed CWE-74
Priority HIGH 70
A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00525 · Published 2025-05-19 · No fix listed CWE-74
Priority HIGH 70
A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00533 · Published 2025-05-19 · No fix listed CWE-284
Priority HIGH 70
A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00562 · Published 2025-05-19 · No fix listed CWE-548
Priority MEDIUM 50
SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in user_proposal_update_order.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00755 · Published 2025-05-09 · No fix listed CWE-434
Priority MEDIUM 49
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_payment_update.php via the order_id POST parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00418 · Published 2025-05-09 · No fix listed CWE-89
Priority MEDIUM 51
Arbitrary File Upload in user_payment_update.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploaded_file_cancelled field.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01202 · Published 2025-05-09 · No fix listed CWE-94
Priority MEDIUM 49
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_delivery_update.php via the order_id POST parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00418 · Published 2025-05-09 · No fix listed CWE-89
Priority MEDIUM 49
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php via the order_id POST parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00521 · Published 2025-05-09 · No fix listed CWE-89
Priority MEDIUM 50
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00671 · Published 2025-05-09 · No fix listed CWE-89
THREATIST.IORead the docs