CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-46007
https://notcve.org/view.php?id=CVE-2023-46007
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_staff.php. Sourcecodester Best Courier Management System 1.0 es vulnerable a la inyección SQL a través del parámetro id en /edit_staff.php. • https://github.com/zerrr0/Zerrr0_Vulnerability/blob/main/Best%20Courier%20Management%20System%201.0/SQL-Injection-Vulnerability-3.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2023-5302 – SourceCodester Best Courier Management System Manage Account Page cross site scripting
https://notcve.org/view.php?id=CVE-2023-5302
A vulnerability, which was classified as problematic, has been found in SourceCodester Best Courier Management System 1.0. This issue affects some unknown processing of the component Manage Account Page. The manipulation of the argument First Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/rohit0x5/poc/blob/main/cve_2 https://vuldb.com/?ctiid.240941 https://vuldb.com/?id.240941 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 2CVE-2021-46198
https://notcve.org/view.php?id=CVE-2021-46198
An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app. Se presenta una vulnerabilidad de inyección SQL en Sourceodester Courier Management System versión 1.0, por medio del parámetro email en el archivo /cms/ajax.php • https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Courier-Management-System https://www.nu11secur1ty.com/2022/01/courier-management-system-10-sql.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2020-35329
https://notcve.org/view.php?id=CVE-2020-35329
Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '. Courier Management System versión 1.0 1.0, está afectado por una inyección SQL por medio de "MULTIPART street" • https://www.exploit-db.com/exploits/49242 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2020-35328
https://notcve.org/view.php?id=CVE-2020-35328
Courier Management System 1.0 - 'First Name' Stored XSS Courier Management System versión 1.0 - Una vulnerabilidad de tipo XSS almacenado de "First Name" • https://www.exploit-db.com/exploits/49241 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •