Client Database Management System vulnerabilities
4 known vulnerabilities in Client Database Management System from Lerouxyxchire. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
Client Database Management System: Cross-Site Request Forgery
A Cross-Site Request Forgery (CSRF) vulnerability in the SourceCodester Client Database Management System 1.0 allows an attacker to cause an authenticated administrative user to perform user deletion actions without their consent. The application's user deleti
- 9.8 Critical severity
Client Database Management System: Improper Control of Generation of Code
Arbitrary File Upload in user_payment_update.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploaded_file_cancelled field. Due to the absence of proper file extension checks, MIME type
- 9.8 Critical severity
Client Database Management System: Unrestricted Upload of File with Dangerous Type
SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in user_proposal_update_order.php.
- 9.8 Critical severity
Client Database Management System: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php via the order_id POST parameter.