Purchase Order Management System vulnerabilities

2 known vulnerabilities in Purchase Order Management System from Purchase Order Management System Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  purchase_order_management_system: Unrestricted Upload of File with Dangerous Type

  CVE-2024-48454Oct 24, 2024Purchase Order Management System Project

  An issue in SourceCodester Purchase Order Management System v1.0 allows a remote attacker to execute arbitrary code via the /admin?page=user component

• 9.8 Critical severity

  Purchase Order Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-28023Apr 21, 2022Purchase Order Management System ProjectEPSS 2.62%

  Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_supplier.