PO
Vendor
Purchase Order Management System Project
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-48454 | PO Purchase Order Management System Purchase Order Management System Project | 7.2 | Oct 24 | An issue in SourceCodester Purchase Order Management System v1.0 allows a remote attacker to execute arbitrary code via the /admin?page=user component |
| CVE-2023-2293 | PO Purchase Order Management System Purchase Order Management System Project | 4.8 | Apr 25 | A vulnerability was found in SourceCodester Purchase Order Management System 1.0 |
| CVE-2023-2130 | PO Purchase Order Management System Purchase Order Management System Project | 9.8 | Apr 17 | A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0 |
| CVE-2022-44400 | PO Purchase Order Management System Purchase Order Management System Project | 9.8 | Nov 28 | Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info |
| CVE-2022-3503 | PO Purchase Order Management System Purchase Order Management System Project | 5.4 | Oct 14 | SourceCodester Purchase Order Management System Supplier cross site scripting |
| CVE-2022-28023 | PO Purchase Order Management System Purchase Order Management System Project | 9.8 | Apr 21 | Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_supplier |
| CVE-2022-28022 | PO Purchase Order Management System Purchase Order Management System Project | 9.8 | Apr 21 | Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_item |
| CVE-2022-28021 | PO Purchase Order Management System Purchase Order Management System Project | 9.8 | Apr 21 | Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user |
| CVE-2021-40908 | PO Purchase Order Management System Purchase Order Management System Project | 9.8 | Jan 24 | SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username… |