Vendors / Barangay Management System Project Barangay Management System Project Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 5
Exploited now Barangay Management System Project records in CISA KEV No Barangay Management System Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /clearance/clearance.php.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00963 · Published 2022-10-28 · No fix listed CWE-89
Priority MEDIUM 58
Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00438 · Published 2024-02-14 · No fix listed CWE-79
Priority MEDIUM 58
Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00424 · Published 2024-02-14 · No fix listed CWE-79
Priority MEDIUM 50
Barangay Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the module editing function at /pages/activity/activity.php.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.19713 · Published 2022-07-27 · No fix listed CWE-434
Priority MEDIUM 44
Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /blotter/blotter.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01001 · Published 2022-08-18 · No fix listed CWE-89
Priority MEDIUM 43
Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /officials/officials.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00783 · Published 2022-07-19 · No fix listed CWE-89
Priority MEDIUM 40
Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/permit/permit.php.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00935 · Published 2022-07-28 · No fix listed CWE-89
Priority LOW 34
Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module editing function at /bmis/pages/resident/resident.php.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01408 · Published 2022-07-19 · No fix listed CWE-434
Priority LOW 33
Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/household/household.php.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00929 · Published 2022-07-20 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
2 5 2 0 0
THREATIST.IORead the docs