Packers And Movers Management System

packers_and_movers_management_system

Vendor: Oretnom23 • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-57523 1Oretnom23 1Packers And Movers Management System Jul 5, 2026 Feb 6, 2025 N/A· v4 4.5 MEDIUM· v3 N/A· v2 Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.
CVE-2024-57522 1Oretnom23 1Packers And Movers Management System Jun 17, 2026 Feb 3, 2025 N/A· v4 6.4 MEDIUM· v3 N/A· v2 SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php. An attacker can inject a malicious script into the username or name field during user creation.
CVE-2024-48427 1Oretnom23 1Packers And Movers Management System Jun 17, 2026 Oct 24, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in /mpms/admin/?page=services/manage_serv...Show more A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in /mpms/admin/?page=services/manage_service&idShow less
CVE-2023-46956 1Oretnom23 1Packers And Movers Management System Jun 17, 2026 Nov 30, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 SQL injection vulnerability in Packers and Movers Management System v.1.0 allows a remote attacker to execute arbitrary code via crafted payload to the /mpms/admin/?page=user/manage_user&id file.
CVE-2023-46435 1Oretnom23 1Packers And Movers Management System Jun 17, 2026 Oct 26, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Sourcecodester Packers and Movers Management System v1.0 is vulnerable to SQL Injection via mpms/?p=services/view_service&id.
CVE-2023-30415 1Oretnom23 1Packers And Movers Management System Jun 17, 2026 Sep 28, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/view_inquiry.php.