VendorsPurchase Order Management System Projectpurchase_order_management_systemall versions
Vulnerabilities

Purchase Order Management System Project Purchase Order Management System

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2022-28021
Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user.
Published 2022-04-21 · Modified
9.8EPSS 0.243
CVE-2023-2130
SourceCodester Purchase Order Management System GET Parameter view_details.php sql injection
Published 2023-04-17 · Modified
9.8EPSS 0.041
CVE-2022-28022
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_item.
Published 2022-04-21 · Modified
9.8EPSS 0.026
CVE-2022-28023
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_supplier.
Published 2022-04-21 · Modified
9.8EPSS 0.026
CVE-2021-40908
SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter.
Published 2022-01-24 · Modified
9.8EPSS 0.025
CVE-2022-44400
Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info.
Published 2022-11-28 · Modified
9.8EPSS 0.011
CVE-2022-3503
SourceCodester Purchase Order Management System Supplier cross site scripting
Published 2022-10-14 · Modified
5.4EPSS 0.005
CVE-2023-2293
SourceCodester Purchase Order Management System cross site scripting
Published 2023-04-25 · Modified
4.8EPSS 0.006