Show filters
16 Total Results
Displaying 1-10 of 16
Sort by:
Attacker Value
Unknown
CVE-2024-4945
Disclosure Date: May 16, 2024 (last updated February 11, 2025)
A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file view_parcel.php. The manipulation of the argument id leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-264480.
0
Attacker Value
Unknown
CVE-2023-6898
Disclosure Date: December 17, 2023 (last updated January 04, 2025)
A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248256.
0
Attacker Value
Unknown
CVE-2023-6301
Disclosure Date: November 27, 2023 (last updated November 30, 2023)
A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file parcel_list.php of the component GET Parameter Handler. The manipulation of the argument id with the input </TiTlE><ScRiPt>alert(1)</ScRiPt> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-246127.
0
Attacker Value
Unknown
CVE-2023-6300
Disclosure Date: November 27, 2023 (last updated November 30, 2023)
A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input </TiTlE><ScRiPt>alert(1)</ScRiPt> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-246126 is the identifier assigned to this vulnerability.
0
Attacker Value
Unknown
CVE-2023-46980
Disclosure Date: November 03, 2023 (last updated November 15, 2023)
An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter.
0
Attacker Value
Unknown
CVE-2023-46451
Disclosure Date: October 31, 2023 (last updated November 07, 2023)
Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change username field.
0
Attacker Value
Unknown
CVE-2023-46007
Disclosure Date: October 18, 2023 (last updated October 25, 2023)
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_staff.php.
0
Attacker Value
Unknown
CVE-2023-46006
Disclosure Date: October 18, 2023 (last updated October 25, 2023)
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_user.php.
0
Attacker Value
Unknown
CVE-2023-46005
Disclosure Date: October 18, 2023 (last updated October 25, 2023)
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_branch.php.
0
Attacker Value
Unknown
CVE-2023-46004
Disclosure Date: October 18, 2023 (last updated October 25, 2023)
Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the update_user function.
0
