Skip to content
OpenAdvisories

Product · itsourcecode

Online Medicine Delivery System

11 known vulnerabilities.

8 results · Clear filters · Feed

  • High 7.3

    itsourcecode Online Medicine Delivery System Order Management Controller controller.php doInsert unrestricted upload

    A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the function doInsert of the file /rider/orders/controller.php?action=add of the component Order Management Controller. Performing a manipulation …

  • High 7.3

    itsourcecode Online Medicine Delivery System Order Status Update controller.php pupdate sql injection

    A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. Th…

  • High 7.3

    itsourcecode Online Medicine Delivery System Password Recovery passwordrecover.php find_phone sql injection

    A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function Customer::find_phone of the file /passwordrecover.php of the component Password Recovery Interface. The manipulation of the argument phonenumbe…

  • High 7.3

    itsourcecode Online Medicine Delivery System Product Category Filter index.php loadResultList sql injection

    A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component Product Category Filter Interface. Executing a manipulation of the argument Cat…

  • High 7.3

    itsourcecode Online Medicine Delivery System Product Search index.php loadResultList sql injection

    A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Product Search Interface. Performing a manipulation of the argument Search results in …

  • High 7.3

    itsourcecode Online Medicine Delivery System Product Detail index.php loadResultList sql injection

    A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=single-item of the component Product Detail Page. Such manipulation of the argument …

  • High 7.3

    itsourcecode Online Medicine Delivery System Customer Login login.php cusAuthentication sql injection

    A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function Customer::cusAuthentication of the file /login.php of the component Customer Login Interface. This manipulation of the argument …

  • High 7.3

    itsourcecode Online Medicine Delivery System Login login.php employeeAuthentication sql injection

    A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employee::employeeAuthentication of the file /rider/login.php of the component Login Interface. The manipulation of the argument emp_email result…