Phone Shop Sales Management System Project
Phone Shop Sales Management System Project Phone Shop Sales Management System: vulnerabilidades y CVE
Phone Shop Sales Management System Project Phone Shop Sales Management System tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-36560 | Crítica (9.8) | 1.5% | — | 2 nov 2021 | Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account takeover of the admin. |
| CVE-2021-36623 | Crítica (9.8) | 1.8% | — | 3 ago 2021 | Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE. |
| CVE-2021-36624 | Crítica (9.8) | 3.4% | — | 30 jul 2021 | Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. |
| CVE-2021-35337 | Media (4.3) | 0.82% | — | 1 jul 2021 | Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices of different users by changing the id parameter. |