Oretnom23 Packers And Movers Management System vulnerabilities

6 vulnerabilities

Known vulnerabilities in Oretnom23 Packers And Movers Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2024-48427oretnom23packers_and_movers_management_system
EPSS score
0.92%
A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in /mpms/admin/?page=services/manage_service&id6.4CVE-2024-57522oretnom23packers_and_movers_management_system
EPSS score
1.02%
SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php. An attacker can inject a malicious script into the username or name field during user creation.4.5CVE-2024-57523oretnom23packers_and_movers_management_system
EPSS score
0.50%
Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.9.8CVE-2023-46435oretnom23packers_and_movers_management_system
EPSS score
0.63%
Sourcecodester Packers and Movers Management System v1.0 is vulnerable to SQL Injection via mpms/?p=services/view_service&id.7.2CVE-2023-46956oretnom23packers_and_movers_management_system
EPSS score
1.19%
SQL injection vulnerability in Packers and Movers Management System v.1.0 allows a remote attacker to execute arbitrary code via crafted payload to the /mpms/admin/?page=user/manage_user&id file.9.8CVE-2023-30415oretnom23packers_and_movers_management_system
EPSS score
0.99%
Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/view_inquiry.php.