<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: courier management system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-13396: A weakness has been identified in code-projects Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-13396.html</link><guid>https://patchthecve.com/cve/CVE-2025-13396.html</guid><pubDate>Sun, 18 Oct 2026 20:10:00 +0000</pubDate><description>MEDIUM 6.3: A weakness has been identified in code-projects Courier Management System 1.0. This affects an unknown function of the file /add-office.php. This manipulation of the argument OfficeName causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and </description></item><item><title>CVE-2025-13303: A vulnerability was determined in code-projects Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-13303.html</link><guid>https://patchthecve.com/cve/CVE-2025-13303.html</guid><pubDate>Wed, 07 Oct 2026 21:10:00 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was determined in code-projects Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /search-edit.php. This manipulation of the argument Consignment causes sql injection. The attack can be initiated remotely. The exploit has been publicly di</description></item><item><title>CVE-2025-13302: A vulnerability was identified in code-projects Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-13302.html</link><guid>https://patchthecve.com/cve/CVE-2025-13302.html</guid><pubDate>Wed, 07 Oct 2026 21:10:00 +0000</pubDate><description>MEDIUM 4.7: A vulnerability was identified in code-projects Courier Management System 1.0. This affects an unknown part of the file /add-new-officer.php. Such manipulation of the argument ManagerName leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used</description></item><item><title>CVE-2025-12316: A vulnerability was identified in code-projects Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-12316.html</link><guid>https://patchthecve.com/cve/CVE-2025-12316.html</guid><pubDate>Thu, 08 Oct 2026 11:10:00 +0000</pubDate><description>HIGH 7.3: A vulnerability was identified in code-projects Courier Management System 1.0. This impacts an unknown function of the file /courier/edit-courier.php. The manipulation of the argument OfficeName leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly availa</description></item><item><title>CVE-2025-11553: A weakness has been identified in code-projects Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-11553.html</link><guid>https://patchthecve.com/cve/CVE-2025-11553.html</guid><pubDate>Thu, 08 Oct 2026 13:10:00 +0000</pubDate><description>MEDIUM 6.3: A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-courier.php. Executing manipulation of the argument Shippername can lead to sql injection. The attack can be launched remotely. The exploit has b</description></item><item><title>CVE-2025-9759: A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-9759.html</link><guid>https://patchthecve.com/cve/CVE-2025-9759.html</guid><pubDate>Sun, 18 Oct 2026 21:10:00 +0000</pubDate><description>HIGH 7.3: A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection. It is possible to initiate the attack remotely. The exploit h</description></item><item><title>CVE-2025-9757: A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-9757.html</link><guid>https://patchthecve.com/cve/CVE-2025-9757.html</guid><pubDate>Sun, 18 Oct 2026 21:10:00 +0000</pubDate><description>HIGH 7.3: A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and</description></item><item><title>CVE-2025-8254: A vulnerability was found in Campcodes Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-8254.html</link><guid>https://patchthecve.com/cve/CVE-2025-8254.html</guid><pubDate>Wed, 17 Jun 2026 10:06:37 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /view_parcel.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclos</description></item><item><title>CVE-2025-8230: A vulnerability classified as critical was found in Campcodes Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-8230.html</link><guid>https://patchthecve.com/cve/CVE-2025-8230.html</guid><pubDate>Wed, 17 Jun 2026 10:06:33 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /manage_user.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the p</description></item><item><title>CVE-2025-8229: A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-8229.html</link><guid>https://patchthecve.com/cve/CVE-2025-8229.html</guid><pubDate>Wed, 17 Jun 2026 10:06:33 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /parcel_list.php. The manipulation of the argument s leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to th</description></item><item><title>CVE-2025-8190: A vulnerability, which was classified as critical, has been found in Campcodes Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-8190.html</link><guid>https://patchthecve.com/cve/CVE-2025-8190.html</guid><pubDate>Wed, 17 Jun 2026 10:06:29 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in Campcodes Courier Management System 1.0. This issue affects some unknown processing of the file /print_pdets.php. The manipulation of the argument ids leads to sql injection. The attack may be initiated remotely. The exploit has be</description></item><item><title>CVE-2025-8189: A vulnerability classified as critical was found in Campcodes Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-8189.html</link><guid>https://patchthecve.com/cve/CVE-2025-8189.html</guid><pubDate>Wed, 17 Jun 2026 10:06:29 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /edit_user.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the pub</description></item><item><title>CVE-2025-8188: A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-8188.html</link><guid>https://patchthecve.com/cve/CVE-2025-8188.html</guid><pubDate>Wed, 17 Jun 2026 10:06:29 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /edit_staff.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to th</description></item><item><title>CVE-2025-8187: A vulnerability was found in Campcodes Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-8187.html</link><guid>https://patchthecve.com/cve/CVE-2025-8187.html</guid><pubDate>Wed, 17 Jun 2026 10:06:28 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Campcodes Courier Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /edit_parcel.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has bee</description></item><item><title>CVE-2025-8186: A vulnerability was found in Campcodes Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-8186.html</link><guid>https://patchthecve.com/cve/CVE-2025-8186.html</guid><pubDate>Wed, 17 Jun 2026 10:06:28 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edit_branch.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploi</description></item><item><title>CVE-2024-10608: A vulnerability was found in code-projects Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-10608.html</link><guid>https://patchthecve.com/cve/CVE-2024-10608.html</guid><pubDate>Wed, 17 Jun 2026 06:56:02 +0000</pubDate><description>HIGH 7.3: A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has been </description></item><item><title>CVE-2024-10607: A vulnerability was found in code-projects Courier Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-10607.html</link><guid>https://patchthecve.com/cve/CVE-2024-10607.html</guid><pubDate>Wed, 17 Jun 2026 06:56:02 +0000</pubDate><description>HIGH 7.3: A vulnerability was found in code-projects Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /track-result.php. The manipulation of the argument Consignment leads to sql injection. The attack can be initiated remotely. The exploit ha</description></item></channel></rss>