← Database

CVE-2025-13303

MEDIUM CVSS: 6.3 Published: 2025-11-17 Modified: 2026-06-17

Description

A vulnerability was determined in code-projects Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /search-edit.php. This manipulation of the argument Consignment causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Carmelogarcia Courier Management System

Weakness Type

CWE-74, CWE-89, CWE-89

References