Purchase Order Management System

purchase_order_management_system

Vendor: Purchase Order Management System Project • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-2293 1Purchase Order Management System Project 1Purchase Order Management System Nov 21, 2024 Apr 25, 2023 N/A· v4 4.8 MEDIUM· v3 3.3 LOW· v2 A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been classified as problematic. This affects an unknown part of the file classes/Master.php?f=save_item. The manipulation of the ar...Show more A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been classified as problematic. This affects an unknown part of the file classes/Master.php?f=save_item. The manipulation of the argument description with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227463.Show less
CVE-2023-2130 1Purchase Order Management System Project 1Purchase Order Management System Nov 21, 2024 Apr 17, 2023 N/A· v4 9.8 CRITICAL· v3 6.5 MEDIUM· v2 A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/view_details.php of the component GET Parameter H...Show more A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/view_details.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-226206 is the identifier assigned to this vulnerability.Show less
CVE-2022-44400 1Purchase Order Management System Project 1Purchase Order Management System Apr 25, 2025 Nov 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info.
CVE-2022-3503 1Purchase Order Management System Project 1Purchase Order Management System Nov 21, 2024 Oct 14, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the ar...Show more A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Name/Address/Contact person/Contact leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210832.Show less
CVE-2022-28023 1Purchase Order Management System Project 1Purchase Order Management System Nov 21, 2024 Apr 21, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_supplier.
CVE-2022-28022 1Purchase Order Management System Project 1Purchase Order Management System Nov 21, 2024 Apr 21, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_item.
CVE-2022-28021 1Purchase Order Management System Project 1Purchase Order Management System Nov 21, 2024 Apr 21, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user.
CVE-2021-40908 1Purchase Order Management System Project 1Purchase Order Management System Nov 21, 2024 Jan 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter.