PatchTheCVE: gadget works online ordering system projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-1795: A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0https://patchthecve.com/cve/CVE-2023-1795.htmlhttps://patchthecve.com/cve/CVE-2023-1795.htmlWed, 17 Jun 2026 05:28:46 +0000LOW 3.5: A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/products/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input <scriptCVE-2023-1433: A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0https://patchthecve.com/cve/CVE-2023-1433.htmlhttps://patchthecve.com/cve/CVE-2023-1433.htmlWed, 17 Jun 2026 05:27:57 +0000MEDIUM 4.7: A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/products/controller.php?action=add of the component Products Handler. The manipulation of the argument filename leads to unrestriCVE-2023-1359: A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as prohttps://patchthecve.com/cve/CVE-2023-1359.htmlhttps://patchthecve.com/cve/CVE-2023-1359.htmlWed, 17 Jun 2026 05:27:46 +0000LOW 2.4: A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /philosophy/admin/user/controller.php?action=add of the component Add New User. The manipulation of the argument U_NAME leads toCVE-2023-1358: A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering Syhttps://patchthecve.com/cve/CVE-2023-1358.htmlhttps://patchthecve.com/cve/CVE-2023-1358.htmlWed, 17 Jun 2026 05:27:46 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0. This affects an unknown part of the file /philosophy/admin/login.php of the component POST Parameter Handler. The manipulation of the argument user_email leads to sql injection. ItCVE-2021-34073: A Cross Site Scripting (XSS) vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/https://patchthecve.com/cve/CVE-2021-34073.htmlhttps://patchthecve.com/cve/CVE-2021-34073.htmlWed, 17 Jun 2026 03:55:27 +0000MEDIUM 5.4: A Cross Site Scripting (XSS) vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php.