Lerouxyxchire vulnerabilities
We track 4 vulnerabilities in Lerouxyxchire products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2025.
Latest Lerouxyxchire vulnerabilities
- 7.1 High severity
Client Database Management System: Cross-Site Request Forgery
A Cross-Site Request Forgery (CSRF) vulnerability in the SourceCodester Client Database Management System 1.0 allows an attacker to cause an authenticated administrative user to perform user deletion actions without their consent. The application's user deleti
- 9.8 Critical severity
Client Database Management System: Improper Control of Generation of Code
Arbitrary File Upload in user_payment_update.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploaded_file_cancelled field. Due to the absence of proper file extension checks, MIME type
- 9.8 Critical severity
Client Database Management System: Unrestricted Upload of File with Dangerous Type
SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in user_proposal_update_order.php.
- 9.8 Critical severity
Client Database Management System: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php via the order_id POST parameter.