Vulnerabilidades do Code-projects Courier Management System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Code-projects Courier Management System: 5 registro(s), com versões afetadas e correções.
CVE-2025-13396
Crítica · 9.8
CWE-74 19/11/2025
code-projects Courier Management System add-office.php sql injection
A weakness has been identified in code-projects Courier Management System 1.0. This affects an unknown function of the file /add-office.php. This manipulation of the argument OfficeName causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-13303
Crítica · 9.8
CWE-89 17/11/2025
code-projects Courier Management System search-edit.php sql injection
A vulnerability was determined in code-projects Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /search-edit.php. This manipulation of the argument Consignment causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-13302
Crítica · 9.8
CWE-89 17/11/2025
code-projects Courier Management System add-new-officer.php sql injection
A vulnerability was identified in code-projects Courier Management System 1.0. This affects an unknown part of the file /add-new-officer.php. Such manipulation of the argument ManagerName leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
CVE-2025-12316
Crítica · 9.8
CWE-89 27/10/2025
code-projects Courier Management System edit-courier.php sql injection
A vulnerability was identified in code-projects Courier Management System 1.0. This impacts an unknown function of the file /courier/edit-courier.php. The manipulation of the argument OfficeName leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
CVE-2025-11553
Crítica · 9.8
CWE-89 09/10/2025
code-projects Courier Management System add-courier.php sql injection
A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-courier.php. Executing manipulation of the argument Shippername can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.