Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:online_medicine_ordering_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductOnline Medicine Ordering System (116c119b-5e42-5ec4-951f-2cf6aed70e2f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3141 vulnerable 2026-06-08 07:23:08.246634 SourceCodester Online Medicine Ordering System manage_category.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage_category.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-03T05:00:16.544Z
Updated: 2025-04-06T05:30:51.791Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3140 vulnerable 2026-06-08 07:23:08.245117 SourceCodester Online Medicine Ordering System view_category.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /view_category.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-03T04:31:05.693Z
Updated: 2025-04-06T05:30:29.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3716 vulnerable 2026-06-08 05:48:21.736219 SourceCodester Online Medicine Ordering System cross site scripting
LOW (3.5)
A vulnerability classified as problematic was found in SourceCodester Online Medicine Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /omos/admin/?page=user/list. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-212347.
Published: 2022-10-27T00:00:00.000Z
Updated: 2024-08-03T01:20:57.102Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3714 vulnerable 2026-06-08 05:48:21.732673 SourceCodester Online Medicine Ordering System sql injection
MEDIUM (5)
A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/view_order. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-212346 is the identifier assigned to this vulnerability.
Published: 2022-10-27T00:00:00.000Z
Updated: 2024-11-20T14:39:38.106Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.