Filtered by vendor Purchase Order Management Project
Subscribe
Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-29623 | 1 Purchase Order Management Project | 1 Purchase Order Management | 2024-11-21 | N/A | 6.1 MEDIUM |
Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the password parameter at /purchase_order/classes/login.php. | |||||
CVE-2023-29622 | 1 Purchase Order Management Project | 1 Purchase Order Management | 2024-11-21 | N/A | 9.8 CRITICAL |
Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchase_order/admin/login.php. | |||||
CVE-2023-29621 | 1 Purchase Order Management Project | 1 Purchase Order Management | 2024-11-21 | N/A | 8.8 HIGH |
Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server. |