Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.5) | 0.50% | 💥 PoC | Oretnom23 Packers AND Movers Management System | 6/2/2025 | 5/7/2026 | Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user. | |
| Analizada | Media (6.4) | 1.0% | 💥 PoC | Oretnom23 Packers AND Movers Management System | 3/2/2025 | 17/6/2026 | SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php. An attacker can inject a malicious script into the username or name field during user creation. | |
| Analizada | Alta (8.8) | 0.92% | 💥 PoC | Oretnom23 Packers AND Movers Management System | 24/10/2024 | 17/6/2026 | A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in /mpms/admin/?page=services/manage_service&id | |
| Modificada | Alta (7.2) | 1.2% | — | Oretnom23 Packers AND Movers Management System | 30/11/2023 | 17/6/2026 | SQL injection vulnerability in Packers and Movers Management System v.1.0 allows a remote attacker to execute arbitrary code via crafted payload to the /mpms/admin/?page=user/manage_user&id file. | |
| Modificada | Crítica (9.8) | 0.63% | — | Oretnom23 Packers AND Movers Management System | 26/10/2023 | 17/6/2026 | Sourcecodester Packers and Movers Management System v1.0 is vulnerable to SQL Injection via mpms/?p=services/view_service&id. | |
| Modificada | Crítica (9.8) | 0.99% | — | Oretnom23 Packers AND Movers Management System | 28/9/2023 | 17/6/2026 | Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/view_inquiry.php. |