zerrr0/Zerrr0_Vulnerability

Releases0

Zerrr0_Vulnerability

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2023-46004NVD↗	—	Oct 18, 2023Wednesday, 18 October 2023, 13:15	7.2 HIGH	—
Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the update_user function.
CVE-2023-46005NVD↗	—	Oct 18, 2023Wednesday, 18 October 2023, 13:15	9.8 CRITICAL	—
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_branch.php.
CVE-2023-46006NVD↗	—	Oct 18, 2023Wednesday, 18 October 2023, 13:15	9.8 CRITICAL	—
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_user.php.
CVE-2023-46007NVD↗	—	Oct 18, 2023Wednesday, 18 October 2023, 13:15	9.8 CRITICAL	—
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_staff.php.
CVE-2022-36580NVD↗	—	Aug 31, 2022Wednesday, 31 August 2022, 20:15	7.2 HIGH	—
An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2022-36581NVD↗	—	Aug 31, 2022Wednesday, 31 August 2022, 20:15	7.5 HIGH	—
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the user_email parameter at /admin/login.php.
CVE-2022-36582NVD↗	—	Aug 31, 2022Wednesday, 31 August 2022, 20:15	7.2 HIGH	—
An arbitrary file upload vulnerability in the component /php_action/createProduct.php of Garage Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.