Mayurik Courier Management System vulnerabilities

3 CVEs affecting Mayurik Courier Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-46974, published 2023-12-07.

More from Mayurik.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-48823, published 2023-12-07. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A Blind SQL injection issue in ajax.php in GaatiTrack Courier Management System 1.0 allows an unauthenticated attacker to inject a payload via the email parameter during login.
• CVE-2023-46974, published 2023-12-07. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code via a crafted payload to the page parameter in the URL.
• CVE-2023-48206, published 2023-12-07. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A Cross Site Scripting (XSS) vulnerability in GaatiTrack Courier Management System 1.0 allows a remote attacker to inject JavaScript via the page parameter to login.php or header.php.