Read the docs

ArslanSoft

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

ArslanSoft records in CISA KEV

No ArslanSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Arslansoft Education Portal 4 records MEDIUM

Records

4 records in Arslansoft Education Portal · all components

TI-2023-05185 CVE-2023-5634 · GHSA-6m99-jq84-jj9w

SQLi in ArslanSoft's Education Portal

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ArslanSoft Education Portal allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00788 Published 2023-12-01 Fixed in v1.1 CWE-89
TI-2023-05187 CVE-2023-5636 · GHSA-56m8-9r6v-cqp3

Malicious File Upload in ArslanSoft's Education Portal

Priority MEDIUM 45

Unrestricted Upload of File with Dangerous Type vulnerability in ArslanSoft Education Portal allows Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01681 Published 2023-12-01 Fixed in v1.1 CWE-434
TI-2023-05186 CVE-2023-5635 · GHSA-rh6q-6cxg-4782

User Enumeration in ArslanSoft's Education Portal

Priority MEDIUM 40

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ArslanSoft Education Portal allows Account Footprinting.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00595 Published 2023-12-01 Fixed in v1.1 CWE-1320
TI-2023-05188 CVE-2023-5637 · GHSA-8j4j-rmcw-465w

Plaintext Storage of a Password in ArslanSoft's Education Portal

Priority LOW 34

Unrestricted Upload of File with Dangerous Type vulnerability in ArslanSoft Education Portal allows Read Sensitive Strings Within an Executable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00628 Published 2023-12-01 Fixed in v1.1 CWE-434
Open these records in search →