Purchase Order Management Project

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-29623 Apr 14, 02:15 MEDIUM POC This Month

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the password parameter at /purchase_order/classes/login.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Purchase Order Management Purchase Order Management Project

NVD GitHub

CVSS 3.1

6.1

EPSS

1.2%

CVE-2023-29622 Apr 14, 02:15 CRITICAL POC Act Now

Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchase_order/admin/login.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Purchase Order Management Purchase Order Management Project

NVD GitHub

CVSS 3.1

9.8

EPSS

1.7%

CVE-2023-29621 Apr 14, 02:15 HIGH POC This Week

Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE File Upload Purchase Order Management Purchase Order Management Project

NVD GitHub

CVSS 3.1

8.8

EPSS

1.0%

CVE-2023-29623

EPSS 1% CVSS 6.1

MEDIUM POC This Month

PHP XSS Purchase Order Management +1

NVD GitHub

CVE-2023-29622

EPSS 2% CVSS 9.8

CRITICAL POC Act Now

PHP SQLi Purchase Order Management +1

NVD GitHub

CVE-2023-29621

EPSS 1% CVSS 8.8

HIGH POC This Week

RCE File Upload Purchase Order Management +1

NVD GitHub