Abc Courier Management System
Monthly
Unauthenticated SQL injection in ABC Courier Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the 'From' parameter of /report.php. Exploit code is publicly available, but active exploitation has not been confirmed. The product is a niche academic project with low deployment footprint, limiting real-world impact.
Remote SQL injection in 1000 Projects ABC Courier Management System 1.0 allows unauthenticated attackers to execute arbitrary SQL commands via the ID parameter in /getbyid.php. Exploit code is publicly available and has been disclosed, though the EPSS exploitation probability is low (0.06%). The flaw could lead to unauthorized data access, modification, or database compromise.
SQL injection in ABC Courier Management System 1.0 allows remote attackers to inject malicious SQL via the reciver_name parameter in /Add_reciver.php. Publicly available exploit code exists, though no active exploitation has been reported and EPSS probability is low (0.07%). The vulnerability can lead to
A critical SQL injection vulnerability exists in 1000projects ABC Courier Management version 1.0 affecting the /add_dealerrequest.php endpoint, where the 'Name' parameter is not properly sanitized. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary SQL queries, potentially leading to unauthorized data access, modification, or deletion. The vulnerability has been publicly disclosed with exploit code available, making it an active threat.
Critical SQL injection vulnerability in 1000 Projects ABC Courier Management System version 1.0, affecting the /admin endpoint's Username parameter. An unauthenticated remote attacker can exploit this to execute arbitrary SQL queries, potentially leading to unauthorized data access, modification, or deletion. The vulnerability has been publicly disclosed with proof-of-concept availability, significantly increasing real-world exploitation risk.
Unauthenticated SQL injection in ABC Courier Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the 'From' parameter of /report.php. Exploit code is publicly available, but active exploitation has not been confirmed. The product is a niche academic project with low deployment footprint, limiting real-world impact.
Remote SQL injection in 1000 Projects ABC Courier Management System 1.0 allows unauthenticated attackers to execute arbitrary SQL commands via the ID parameter in /getbyid.php. Exploit code is publicly available and has been disclosed, though the EPSS exploitation probability is low (0.06%). The flaw could lead to unauthorized data access, modification, or database compromise.
SQL injection in ABC Courier Management System 1.0 allows remote attackers to inject malicious SQL via the reciver_name parameter in /Add_reciver.php. Publicly available exploit code exists, though no active exploitation has been reported and EPSS probability is low (0.07%). The vulnerability can lead to
A critical SQL injection vulnerability exists in 1000projects ABC Courier Management version 1.0 affecting the /add_dealerrequest.php endpoint, where the 'Name' parameter is not properly sanitized. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary SQL queries, potentially leading to unauthorized data access, modification, or deletion. The vulnerability has been publicly disclosed with exploit code available, making it an active threat.
Critical SQL injection vulnerability in 1000 Projects ABC Courier Management System version 1.0, affecting the /admin endpoint's Username parameter. An unauthenticated remote attacker can exploit this to execute arbitrary SQL queries, potentially leading to unauthorized data access, modification, or deletion. The vulnerability has been publicly disclosed with proof-of-concept availability, significantly increasing real-world exploitation risk.