Vulnerabilities

TI-2023-02150 CVE-2023-2293 · GHSA-mp4c-f3pc-94gm

SourceCodester Purchase Order Management System cross site scripting

LOW 23

A vulnerability was found in SourceCodester Purchase Order Management System 1.0.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00564 Published 2023-04-25 No fix listed CWE-79

TI-2023-01998 CVE-2023-2130 · GHSA-mhpj-ghcf-5j4p

SourceCodester Purchase Order Management System GET Parameter view_details.php sql injection

MEDIUM 49

A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04122 Published 2023-04-17 No fix listed CWE-89

TI-2022-21811 CVE-2022-44400 · GHSA-jf7m-54wp-p639

Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info.

HIGH 75

Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-11-28 No fix listed CWE-434

TI-2022-03233 CVE-2022-3503 · GHSA-gx38-54cf-m5hf

SourceCodester Purchase Order Management System Supplier cross site scripting

MEDIUM 58

A vulnerability was found in SourceCodester Purchase Order Management System 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00592 Published 2022-10-14 No fix listed CWE-707

TI-2022-10859 CVE-2022-28022 · GHSA-j4v6-f2xq-484w

Purchase Order Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 47

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_item.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2022-04-21 No fix listed CWE-89

TI-2022-10858 CVE-2022-28021 · GHSA-g2fv-7p92-26hg

Purchase Order Management System v1.0 was discovered to contain a remote code execution…

MEDIUM 63

Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24256 Published 2022-04-21 No fix listed CWE-434

TI-2022-10860 CVE-2022-28023 · GHSA-v2wv-fw8v-86pw

Purchase Order Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 47

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_supplier.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02621 Published 2022-04-21 No fix listed CWE-89

TI-2021-17821 CVE-2021-40908 · GHSA-2qxj-9jmr-f734

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management…

MEDIUM 47

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02534 Published 2022-01-24 No fix listed CWE-89

Vulnerabilities

Filters