PatchTheCVE: courier management system projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-46198: An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter ihttps://patchthecve.com/cve/CVE-2021-46198.htmlhttps://patchthecve.com/cve/CVE-2021-46198.htmlWed, 17 Jun 2026 04:14:38 +0000CRITICAL 9.8: An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app.CVE-2020-35329: Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '.https://patchthecve.com/cve/CVE-2020-35329.htmlhttps://patchthecve.com/cve/CVE-2020-35329.htmlWed, 17 Jun 2026 03:13:38 +0000MEDIUM 6.5: Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '.CVE-2020-35328: Courier Management System 1.0 - 'First Name' Stored XSShttps://patchthecve.com/cve/CVE-2020-35328.htmlhttps://patchthecve.com/cve/CVE-2020-35328.htmlWed, 17 Jun 2026 03:13:38 +0000MEDIUM 5.4: Courier Management System 1.0 - 'First Name' Stored XSSCVE-2020-35327: SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the rehttps://patchthecve.com/cve/CVE-2020-35327.htmlhttps://patchthecve.com/cve/CVE-2020-35327.htmlWed, 17 Jun 2026 03:13:38 +0000MEDIUM 6.5: SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the ref_no (POST) parameter to admin_class.php