Best Courier Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:sourcecodester:best_courier_management_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551) |
|---|---|
| Product | Best Courier Management System (e9b6ee70-555d-5d52-a1cc-e70d3d46959b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5330 |
vulnerable | 2026-06-08 08:07:03.567840 |
SourceCodester/mayuri_k Best Courier Management System User Delete ajax.php access control
MEDIUM (6.5)
A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_user of the component User Delete Handler. Performing a manipulation of the argument ID results in improper access controls. The attack may be initiated remotely. The exploit has been made public and could be used.
Published: 2026-04-02T12:45:10.637Z
Updated: 2026-04-02T14:19:51.165Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4945 |
vulnerable | 2026-06-08 06:50:19.083250 |
SourceCodester Best Courier Management System view_parcel.php unrestricted upload
MEDIUM (4.3)
A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file view_parcel.php. The manipulation of the argument id leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-264480.
Published: 2024-05-16T05:00:05.656Z
Updated: 2024-08-01T20:55:10.344Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6898 |
vulnerable | 2026-06-08 06:21:56.226860 |
SourceCodester Best Courier Management System manage_user.php sql injection
MEDIUM (5.5)
A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248256.
Published: 2023-12-17T10:31:04.117Z
Updated: 2025-05-07T20:40:47.778Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6301 |
vulnerable | 2026-06-08 06:19:46.888621 |
SourceCodester Best Courier Management System GET Parameter parcel_list.php cross site scripting
LOW (3.5)
A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file parcel_list.php of the component GET Parameter Handler. The manipulation of the argument id with the input </TiTlE><ScRiPt>alert(1)</ScRiPt> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-246127.
Published: 2023-11-26T23:31:05.687Z
Updated: 2024-08-02T08:28:21.497Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6300 |
vulnerable | 2026-06-08 06:19:46.888108 |
SourceCodester Best Courier Management System cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The manipulation of the argument page with the input </TiTlE><ScRiPt>alert(1)</ScRiPt> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-246126 is the identifier assigned to this vulnerability.
Published: 2023-11-26T23:31:04.652Z
Updated: 2024-10-10T20:33:30.982Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5302 |
vulnerable | 2026-06-08 06:19:43.126790 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5273 |
vulnerable | 2026-06-08 06:19:43.075040 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5272 |
vulnerable | 2026-06-08 06:19:43.074665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5271 |
vulnerable | 2026-06-08 06:19:43.074031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5270 |
vulnerable | 2026-06-08 06:19:43.072072 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5269 |
vulnerable | 2026-06-08 06:19:43.070304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.