E-negosyo System Project E-negosyo System — known CVE vulnerabilities

Every CVE whose affected-product data names E-negosyo System Project E-negosyo System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-41674 — CVSS 9.8 (critical): An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the user_email parameter in /admin/login.php.
• CVE-2021-41675 — CVSS 7.2 (high): A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert…