Read the docs

Amssplus

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

Amssplus records in CISA KEV

No Amssplus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Amss++ 16 records MEDIUM

Records

17 records

TI-2020-19270 CVE-2020-37135 · GHSA-ffff-75w5-5j62

AMSS++ 4.7 - Backdoor Admin Account

Priority HIGH 81

AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00475 Published 2026-02-06 No fix listed CWE-798
TI-2024-02407 CVE-2024-2588 · GHSA-7hrp-6pgm-w8r3

SQL injection vulnerability in AMSS++

Priority MEDIUM 44

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00534 Published 2024-03-18 No fix listed CWE-89
TI-2024-02404 CVE-2024-2585 · GHSA-846c-6fq3-w23h

SQL injection vulnerability in AMSS++

Priority MEDIUM 44

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send_2.php, in the 'sd_index' parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00523 Published 2024-03-18 No fix listed CWE-89
TI-2024-02411 CVE-2024-2592 · GHSA-h52g-q78r-649c

SQL injection vulnerability in AMSS++

Priority MEDIUM 42

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'person_id' parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00478 Published 2024-03-18 No fix listed CWE-89
TI-2024-02410 CVE-2024-2591 · GHSA-g9rx-gc8h-mpjj

SQL injection vulnerability in AMSS++

Priority MEDIUM 42

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_group.php, in multiple parameters.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00534 Published 2024-03-18 No fix listed CWE-89
TI-2024-02408 CVE-2024-2589 · GHSA-m2m5-v2p8-2hr5

SQL injection vulnerability in AMSS++

Priority MEDIUM 42

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_school_person.php, in multiple parameters.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00534 Published 2024-03-18 No fix listed CWE-89
TI-2024-02403 CVE-2024-2584 · GHSA-5qx9-v4cj-3w5q

SQL injection vulnerability in AMSS++

Priority MEDIUM 42

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send.php, in the 'sd_index' parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00586 Published 2024-03-18 No fix listed CWE-89
TI-2024-02409 CVE-2024-2590 · GHSA-cgvh-9643-55w4

SQL injection vulnerability in AMSS++

Priority LOW 38

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00523 Published 2024-03-18 No fix listed CWE-89
TI-2024-02405 CVE-2024-2586 · GHSA-64jx-996x-wx5w

SQL injection vulnerability in AMSS++

Priority LOW 38

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/index.php, in the 'username' parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00586 Published 2024-03-18 No fix listed CWE-89
TI-2024-02406 CVE-2024-2587 · GHSA-59xm-w7f6-pq99

SQL injection vulnerability in AMSS++

Priority LOW 36

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_khet_person.php, in multiple parameters.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00523 Published 2024-03-18 No fix listed CWE-89
TI-2024-02412 CVE-2024-2593 · GHSA-2w4c-wrx8-g8wh

Cross-Site Scripting (XSS) in AMSS++

Priority LOW 32

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_group.php, in the 'b_…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0042 Published 2024-03-18 No fix listed CWE-79
TI-2024-02417 CVE-2024-2598 · GHSA-x8pf-qjr3-w5cf

Cross-Site Scripting (XSS) in AMSS++

Priority LOW 31

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/select_send_2.php, in multiple p…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00411 Published 2024-03-18 No fix listed CWE-79
TI-2024-02416 CVE-2024-2597 · GHSA-936g-q8pj-qjhp

Cross-Site Scripting (XSS) in AMSS++

Priority LOW 31

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_school_person.php, in…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00411 Published 2024-03-18 No fix listed CWE-79
TI-2024-02415 CVE-2024-2596 · GHSA-7j4f-2m7v-2cjv

Cross-Site Scripting (XSS) in AMSS++

Priority LOW 31

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/mail/main/select_send.php, in multiple par…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00411 Published 2024-03-18 No fix listed CWE-79
TI-2024-02414 CVE-2024-2595 · GHSA-gp97-78rf-vw76

Cross-Site Scripting (XSS) in AMSS++

Priority LOW 31

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_khet_person.php, in t…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00403 Published 2024-03-18 No fix listed CWE-79
TI-2024-02413 CVE-2024-2594 · GHSA-wh3q-8jwf-qv4m

Cross-Site Scripting (XSS) in AMSS++

Priority LOW 31

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/admin/index.php, in multiple parameters.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00411 Published 2024-03-18 No fix listed CWE-79
Open these records in search →