Lerouxyxchire Client Database Management System 1.0

Arbitrary File Upload in user_payment_update.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploaded_file_cancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attackers can upload executable PHP files to a web-accessible directory (/files/). This allows them to execute arbitrary commands remotely by accessing the uploaded script, resulting in full Remote Code Execution (RCE) without authentication.

SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in user_proposal_update_order.php.

SourceCodester Client Database Management System Endpoint superadmin_delete_manager.php improper authorization

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php.

SourceCodester Client Database Management System user_proposal_update_order.php sql injection

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php via the order_id POST parameter.

SourceCodester Client Database Management System user_void_transaction.php sql injection

SourceCodester Client Database Management System superadmin_update_profile.php sql injection

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_payment_update.php via the order_id POST parameter.

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_delivery_update.php via the order_id POST parameter.

SourceCodester Client Database Management System Leads Generation user_leads.php unrestricted upload

SourceCodester Client Database Management System user_order_customer_update.php unrestricted upload

SourceCodester Client Database Management System Endpoint fetch_manager_details.php improper authorization

SourceCodester Client Database Management System superadmin_user_update.php improper authorization

SourceCodester Client Database Management System exposure of information through directory listing

SourceCodester Client Database Management System user_delivery_update.php unrestricted upload

SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

A Cross-Site Request Forgery (CSRF) vulnerability in the SourceCodester Client Database Management System 1.0 allows an attacker to cause an authenticated administrative user to perform user deletion actions without their consent. The application's user deletion endpoint (e.g., superadmin_user_delete.php) accepts POST requests containing a user_id parameter and does not enforce request origin or anti-CSRF tokens. Because the endpoint lacks proper authentication/authorization checks and CSRF protections, a remote attacker can craft a malicious page that triggers deletion when visited by an authenticated admin, resulting in arbitrary removal of user accounts.

SourceCodester Client Database Management System Endpoint superadmin_user_delete.php improper authorization