Vulnerabilities

TI-2021-14800 CVE-2021-36560 · GHSA-c3mm-5x36-486p

Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to…

MEDIUM 45

Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account takeover of the admin.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01528 Published 2021-11-02 No fix listed CWE-425

TI-2021-14822 CVE-2021-36623 · GHSA-mv29-cx4q-9f4h

Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE.

MEDIUM 46

Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01836 Published 2021-08-03 No fix listed CWE-434

TI-2021-14823 CVE-2021-36624 · GHSA-5j8h-f9hq-mpx6

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL…

MEDIUM 48

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03442 Published 2021-07-29 No fix listed CWE-89

TI-2021-14174 CVE-2021-35337 · GHSA-qr79-4qwm-2cwc

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct…

LOW 22

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00818 Published 2021-07-01 No fix listed CWE-639

Vulnerabilities

Filters

Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to…

Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE.

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL…

Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct…