Rjavenido22

**Name of the Vulnerable Software and Affected Versions** kishor-23 Food Waste Management System version 1.0 **Description** A critical issue has been found, affecting unknown code in the /admin/admin.php file, leading to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted about this disclosure but did not respond. **Recommendations** For kishor-23 Food Waste Management System version 1.0, as a temporary workaround, consider restricting access to the /admin/admin.php file until a patch is available. Avoid using this file for authorization purposes until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Mobile Management Store version 1.0 **Description** A critical issue affects the processing of the file /admin/maintenance/manage category.php in the HTTP GET Request Handler component. The manipulation of the `id` argument leads to SQL injection. The attack can be initiated remotely. **Recommendations** For SourceCodester Online Mobile Management Store version 1.0, consider restricting access to the /admin/maintenance/manage category.php file until a patch is available. As a temporary workaround, avoid using the `id` argument in the affected HTTP GET Request Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Mobile Management Store version 1.0 **Description** A vulnerability was found in the software, affecting an unknown functionality of the file "/?p=products". The manipulation of the `search` argument leads to cross-site scripting. The attack can be launched remotely. **Recommendations** For SourceCodester Online Mobile Management Store version 1.0, as a temporary workaround, consider restricting access to the "/?p=products" endpoint until a patch is available. Avoid using the `search` argument in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Mobile Management Store version 1.0 **Description** A critical issue affects some unknown functionality of the file /admin/login.php. The manipulation of the `username` argument leads to SQL injection. The attack can be launched remotely. **Recommendations** For SourceCodester Online Mobile Management Store version 1.0, consider disabling the `/admin/login.php` file or restricting access to it until a patch is available. As a temporary workaround, avoid using the `username` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Mobile Management Store version 1.0 **Description** A critical vulnerability has been found in the software, affecting an unknown part of the file /classes/Users.php. The manipulation of the `img` argument leads to unrestricted upload. It is possible to initiate the attack remotely. **Recommendations** For version 1.0, consider restricting access to the `img` argument in the /classes/Users.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Mobile Management Store version 1.0 **Description** A critical issue has been found in the software, affecting some unknown functionality of the file /admin/product/manage product.php. The manipulation of the `id` argument leads to SQL injection. The attack can be launched remotely. **Recommendations** For version 1.0, consider disabling access to the /admin/product/manage product.php file until a patch is available. Restrict the use of the `id` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Mobile Management Store version 1.0 **Description** A critical issue was found in the file /admin/orders/view order.php, where the manipulation of the `id` argument leads to sql injection. This issue can be initiated remotely. **Recommendations** For version 1.0, consider restricting access to the /admin/orders/view order.php file until a patch is available. As a temporary workaround, avoid using the `id` argument in the affected file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Mobile Management Store version 1.0 **Description** A critical issue has been found in the software, affecting the file view product.php. The manipulation of the `id` argument leads to SQL injection. The attack can be initiated remotely. **Recommendations** For SourceCodester Online Mobile Management Store version 1.0, consider restricting access to the view product.php file until a patch is available. As a temporary workaround, avoid using the `id` argument in the affected file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Mobile Management Store version 1.0 **Description** A problematic vulnerability was found in the component Product Price Handler of the SourceCodester Online Mobile Management Store. The manipulation of the `quantity` argument with the input `-1` leads to business logic errors. The attack can be launched remotely. **Recommendations** For version 1.0, consider restricting the input of the `quantity` argument to prevent business logic errors until a patch is available. As a temporary workaround, avoid using negative values for the `quantity` argument in the affected component.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Mobile Management Store version 1.0 **Description** A vulnerability was found in the software, classified as problematic. It affects an unknown function of the file /endpoint/update-tracker.php. The manipulation of the `firstname` argument leads to cross-site scripting. The attack can be launched remotely. **Recommendations** For version 1.0, consider disabling the `firstname` argument in the /endpoint/update-tracker.php file until a patch is available. Restrict access to the /endpoint/update-tracker.php endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Block Inserter for Dynamic Content version 1.0 **Description** A critical issue has been discovered, affecting the view post.php file. The manipulation of the `id` argument leads to SQL injection. This issue can be initiated remotely. **Recommendations** For SourceCodester Block Inserter for Dynamic Content version 1.0, consider restricting access to the view post.php file until a fix is available. As a temporary workaround, avoid using the `id` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Daily Habit Tracker version 1.0 **Description** A vulnerability was found in the SourceCodester Daily Habit Tracker, affecting an unknown functionality of the file /endpoint/update-tracker.php. The manipulation of the `day` argument leads to cross-site scripting. The attack can be launched remotely. **Recommendations** For SourceCodester Daily Habit Tracker version 1.0, consider restricting access to the /endpoint/update-tracker.php file until a patch is available. As a temporary workaround, avoid using the `day` argument in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.