Gadget Works Online Ordering System vulnerabilities

2 known vulnerabilities in Gadget Works Online Ordering System from SourceCodester. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Gadget Works Online Ordering System: Unrestricted Upload of File with Dangerous Type

  CVE-2023-1433Mar 16, 2023SourceCodester

  A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/products/controller.php?action=add of the component Products Handler. The manipulation of

• 9.8 Critical severity

  Gadget Works Online Ordering System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-1358Mar 12, 2023SourceCodester

  A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0. This affects an unknown part of the file /philosophy/admin/login.php of the component POST Parameter Handler. The manipulation of the argume